Sophos Anti-Virus Library Visio Scanning Remote Heap Overflow Vulnerability

Bugtraq ID:	14362
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 25 2005 12:00AM
Updated:	Jul 25 2005 12:00AM
Credit:	Alex Wheeler is credited with the discovered this vulnerability.
Vulnerable:	Sophos Anti-Virus 5.0.4 Sophos Anti-Virus 5.0.1 Sophos Anti-Virus 4.5.3 Sophos Anti-Virus 3.95 Sophos Anti-Virus 3.91 Sophos Anti-Virus 3.90 Sophos Anti-Virus 3.86 Sophos Anti-Virus 3.85 Sophos Anti-Virus 3.84 Sophos Anti-Virus 3.83 Sophos Anti-Virus 3.82 Sophos Anti-Virus 3.81 Sophos Anti-Virus 3.80 Sophos Anti-Virus 3.79 Sophos Anti-Virus 3.78 d Sophos Anti-Virus 3.78 Sophos Anti-Virus 3.4.6 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:	Sophos Anti-Virus 4.5.4 Sophos Anti-Virus 3.96 .0

Sophos Anti-Virus Library Visio Scanning Remote Heap Overflow Vulnerability

A remote heap overflow vulnerability exists in Sophos Anti-Virus Library when scanning Visio files. This issue is due to a failure of the library to properly bounds check user-supplied input prior to copying data to an internal memory buffer.

Sophos Anti-Virus Library Visio Scanning Remote Heap Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sophos Anti-Virus Library Visio Scanning Remote Heap Overflow Vulnerability

Solution:
The vendor has released a knowledge base article stating that version 4.5.4 of Sophos Anti-Virus for all platforms, and version 3.96.0 for the following platforms contains a fix for this issue:
- All supported Windows platforms
- All supported Unix platforms
- NetWare
- OS/2
- OpenVMS

Please see the referenced article for further information. Users are encouraged to contact the vendor for further information on obtaining fixes.

Sophos Anti-Virus Library Visio Scanning Remote Heap Overflow Vulnerability

References:

• Advisory: Sophos buffer overflow vulnerability (Sophos)
  
• Sophos Anti-Virus Home Page (Sophos)
  
• SOPHOS ANTIVIRUS LIBRARY REM�?TE HEAP OVERFLOW (Rem0te.com)