CVE-2005-4680: Sophos Anti-Virus

Medium severity, CVSS 5.0. EPSS: 8.5% chance of exploitation in the next 30 days.

Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.

Affected products

• Sophos Sophos Anti-Virus: before 4.02 (fixed in 4.02); from 4.5.0, before 4.5.9 (fixed in 4.5.9); from 4.6.0, before 4.6.9 (fixed in 4.6.9); from 5.0.0, before 5.1.4 (fixed in 5.1.4); version 4.04 only

Published 2005-12-31. Last modified 2026-06-16.