Strix
26.1K

CVE-2005-1530

UnknownEPSS 6.16%

Last modified

CVE-2005-1530 is a vulnerability of currently unknown severity. Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.. EPSS estimates a 6.16% chance of exploitation in the next 30 days.

Description

Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.

Metrics

EPSS Probability
6.16%

92.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
SophosSophos Anti-Virus3.4.6
SophosSophos Anti-Virus3.78
SophosSophos Anti-Virus3.78d
SophosSophos Anti-Virus3.79
SophosSophos Anti-Virus3.80
SophosSophos Anti-Virus3.81
SophosSophos Anti-Virus3.82
SophosSophos Anti-Virus3.83
SophosSophos Anti-Virus3.84
SophosSophos Anti-Virus3.85
SophosSophos Anti-Virus3.86
SophosSophos Anti-Virus3.90
SophosSophos Anti-Virus3.91
SophosSophos Anti-Virus5.0.1
SophosSophos Mailmonitor2.0
SophosSophos Mailmonitor2.1
SophosSophos Mailmonitor For Notes DominoAll versions
SophosSophos Puremessage Anti-Virus4.6
SophosSophos Small Business Suite1.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2005-1530?
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
How severe is CVE-2005-1530?
Severity scoring for CVE-2005-1530 is pending analysis. The EPSS model estimates a 6.16% probability of exploitation in the next 30 days.
How do I fix CVE-2005-1530?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-1530?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST