Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Sophos Anti-Virus products - Critical vulnerability in scanning CAB files

Critical vulnerability in Sophos Anti-Virus products
http://www.incidents.org/diary.php?storyid=1325

Advisory: Crafted Microsoft CAB file can allow arbitrary code to be run
http://www.sophos.com/support/knowledgebase/article/4934.html

QUOTE: A vulnerability has been discovered in Sophos's unpacking of Microsoft Cabinet files, whereby a Microsoft Cabinet (CAB) file could be deliberately crafted to allow an attacker to execute arbitrary code on a vulnerable installation of Sophos Anti-Virus.  Although theoretically a risk, Sophos has not seen any examples of malware attempting to employ this vulnerability.