Description
Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.
References
- 3107 third-party-advisory
- ADV-2007-3077 vdb-entry
- http://www.sophos.com/support/knowledgebase/article/29150.html
- 37527 vdb-entry
- 26714 third-party-advisory
- sophos-zip-xss(36478) vdb-entry
- 20070906 Sophos Anti-Virus 6.5.4 Vulnerability mailing-list
- 25572 vdb-entry