CVE-2005-2768: Sophos Anti-Virus

High severity, CVSS 7.5. EPSS: 12.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.

Affected products

• Sophos Sophos Anti-Virus: version 3.4.6 only; version 3.78 only; version 3.78d only; version 3.79 only; version 3.80 only; version 3.81 only; …

Published 2005-09-02. Last modified 2026-06-16.