CVE-2007-4787: Sophos Scanning Engine

Medium severity, CVSS 5.0. EPSS: 5.7% chance of exploitation in the next 30 days.

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.

Affected products

• Sophos Scanning Engine: version 2.30.4 only
• Sophos Sophos Anti-Virus: version 3.4.6 only; version 3.78 only; version 3.78d only; version 3.79 only; version 3.80 only; version 3.81 only; …

Published 2007-09-10. Last modified 2026-06-16.