Sophos Products Zero-byte MIME Attachments Denial of Service - Advisories - Secunia

SophosのプロダクトにゼロバイトなMIME添付ファイルでDoS起こす脆弱性が存在するそうです。

A vulnerability has been reported in some Sophos products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when processing zero-byte MIME attachments and can be exploited to cause a DoS.

The vulnerability affects the following products that incorporate the July update (4.31 virus data and 2.75 engine):

  • Sophos Email Appliance
  • Pure Message for Unix
  • Sophos Anti-Virus Interface (SAVI)
Security Advisory SA31037 - Sophos Products Zero-byte MIME Attachments Denial of Service - Secunia

screenshot