CVE-2008-3177: Sophos ES1000

Medium severity, CVSS 5.0. EPSS: 5.1% chance of exploitation in the next 30 days.

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.

Affected products

• Sophos ES1000: any version
• Sophos ES4000: any version
• Sophos Sophos Anti-Virus: any version
• Sophos Sophos Puremessage Anti-Virus: any version

Published 2008-07-15. Last modified 2026-06-16.