Advisory: Sophos Anti-Virus Library Remote Heap Overflow
A buffer overflow vulnerability has been discovered in some versions of Sophos
Sophos has seen no example of any virus or other malware attempting to exploit this vulnerability.
Sophos has released fixed versions of all its products to protect against this issue.
You should upgrade to versions that are unaffected.
Customers using EM Library and Sophos small business solutions will receive these updates automatically.
| Sophos |
Affected versions | Non-affected versions | Update available |
|---|---|---|---|
| Sophos Anti-Virus for Windows 2000+ v 5 | 5.0.4 and below | 5.0.5 and above | 5 August 2005 |
| Sophos |
4.5.3 and below | 4.5.4 and above | 22 July 2005 |
| Sophos |
4.5.3 and below | 4.5.4 and above | 22 July 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 22 July 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 22 July 2005 |
| Sophos |
4.6.2 and below | 4.6.3 and above | 5 August 2005 |
| Sophos |
3.96 and below | 3.9.7 and above | 26 August 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 22 July 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 22 July 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 22 July 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 22 July 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 22 July 2005 |
| Small business solutions | Affected versions | Non-affected versions | Update available |
|---|---|---|---|
| Sophos |
3.95 and below | 3.96.0 and above | 29 July 2005 |
| Sophos |
3.95 and below | 3.96.0 and above | 1 August 2005 |
| PureMessage Small Business Edition | 3.95 and below | 3.96.0 and above | 29 July 2005 |
| Gateway products | Affected versions | Non-affected versions | Update available |
|---|---|---|---|
| PureMessage for Windows/Exchange version 2.1 and above |
SAV version 5.0.4 and below |
SAV version 5.0.5 and above | 5 August 2005 |
| PureMessage for Windows/Exchange version 2.0.2 and below | SAV version 3.95.0 and below | SAV version 3.96.0 and above | 29 July 2005 |
| PureMessage for UNIX | SAV version 3.95.0 and below | SAV version 3.95.1 and above | 15 July 2005 |
| MailMonitor for SMTP - Windows | SAV version 3.95 and below | SAV version 3.96.0 and above | 22 July 2005 |
| MailMonitor for SMTP - Windows | SAV version 3.95 and below | SAV version 3.96.0 and above | 22 July 2005 |
| MailMonitor for Notes/Domino | SAV version 3.95 and below | SAV version 3.96.0 and above | 22 July 2005 |
| MailMonitor for Exchange | SAV version 3.95 and below | SAV version 3.96.0 and above | 22 July 2005 |
Sophos thanks Alex Wheeler for his assistance in identifying this vulnerability.
If you need more information or guidance, then please contact technical support.
- Article ID: 13409
- Created: 27 Jul 2005
- Last updated: 5 Oct 2006
