7.5

CVE-2005-2768

Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.

Data is provided by the National Vulnerability Database (NVD)
SophosSophos Anti-virus Version3.4.6
SophosSophos Anti-virus Version3.78
SophosSophos Anti-virus Version3.78d
SophosSophos Anti-virus Version3.79
SophosSophos Anti-virus Version3.80
SophosSophos Anti-virus Version3.81
SophosSophos Anti-virus Version3.82
SophosSophos Anti-virus Version3.83
SophosSophos Anti-virus Version3.84
SophosSophos Anti-virus Version3.85
SophosSophos Anti-virus Version3.86
SophosSophos Anti-virus Version3.90
SophosSophos Anti-virus Version3.91
SophosSophos Anti-virus Version3.95
SophosSophos Anti-virus Version4.5.3
SophosSophos Anti-virus Version5.0.1
SophosSophos Anti-virus Version5.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 12.03% 0.931
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P