Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.06048
Percentile: 0.9031

CVSS Scoring

Affected Products

• cpe:2.3:a:sophos:es1000:*:*:*:*:*:*:*:*
• cpe:2.3:a:sophos:es4000:*:*:*:*:*:*:*:*
• cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*
• cpe:2.3:a:sophos:sophos_puremessage_anti-virus:*:*:*:*:*:*:*:*

← Back to Home