Sophos Anti-Virus CVE-2014-1213 Local Denial of Service Vulnerability
BID:65286
Info
Sophos Anti-Virus CVE-2014-1213 Local Denial of Service Vulnerability
| Bugtraq ID: | 65286 |
| Class: | Unknown |
| CVE: |
CVE-2014-1213 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 31 2014 12:00AM |
| Updated: | Jan 31 2014 12:00AM |
| Credit: | Graham Sutherland |
| Vulnerable: |
Sophos Anti-Virus Engine 3.48 Sophos Anti-Virus 10.0.11 |
| Not Vulnerable: |
Sophos Anti-Virus Engine 3.50 |
Discussion
Sophos Anti-Virus CVE-2014-1213 Local Denial of Service Vulnerability
Sophos Anti-Virus is prone to a local denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected system, denying service to legitimate users. Other denial-of-service attacks are also possible.
Sophos Anti-Virus is prone to a local denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected system, denying service to legitimate users. Other denial-of-service attacks are also possible.
Exploit / POC
Sophos Anti-Virus CVE-2014-1213 Local Denial of Service Vulnerability
Reportedly, a proof-of-concept code is available. The exploit is otherwise not publicly available.
Reportedly, a proof-of-concept code is available. The exploit is otherwise not publicly available.
Solution / Fix
Sophos Anti-Virus CVE-2014-1213 Local Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Sophos Anti-Virus CVE-2014-1213 Local Denial of Service Vulnerability
References:
References:
- Sophos Homepage (Sophos)
- Vulnerability title: Denial of Service in Sophos Anti Virus (Portcullis Computer Security Ltd)