Sophos Antivirus Multiple Security Vulnerabilities

Bugtraq ID:	56401
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Nov 05 2012 12:00AM
Updated:	Nov 09 2012 05:50PM
Credit:	Tavis Ormandy
Vulnerable:	Cisco IronPort Web Security Appliance S-Series 6.3.3 Cisco IronPort Web Security Appliance S-Series 0 Cisco IronPort Email Security Appliance X-Series 7.6 Cisco IronPort Email Security Appliance X-Series 7.8.0 Cisco IronPort Email Security Appliance X-Series 7.0.1 Cisco IronPort Email Security Appliance X-Series 0 Cisco IronPort Email Security Appliance C-Series 7.6 Cisco IronPort Email Security Appliance C-Series 7.0.1 Cisco IronPort Email Security Appliance C-Series 0
Not Vulnerable:

Sophos Antivirus Multiple Security Vulnerabilities

Sophos Antivirus is prone to the following security vulnerabilities:

1. An integer-overflow vulnerability
2. Multiple security-bypass vulnerabilities
3. A cross-site scripting vulnerability
4. Multiple buffer-overflow vulnerabilities
5. A memory-corruption vulnerability
6. A local privilege-escalation vulnerability

Successful exploits may allow an attacker to execute arbitrary script in the context of the application, execute arbitrary code with SYSTEM level privileges, bypass security restrictions, and perform unauthorized actions.

Sophos Antivirus Multiple Security Vulnerabilities

Exploit codes are available; please see the references for more information.

Sophos Antivirus Multiple Security Vulnerabilities

Solution:
The vendor released an update. Please see the references for more information.

Sophos Antivirus Multiple Security Vulnerabilities

References:

• Sophos Homepage (Sophos)