Description
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
References
- 25574 vdb-entry
- http://www.sophos.com/support/knowledgebase/article/29146.html
- 37988 vdb-entry
- sophos-archive-security-bypass(36502) vdb-entry
- ADV-2007-3078 vdb-entry
- 26726 third-party-advisory