CVE-2008-7106: Sophos Puremessage For Microsoft Exchange

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay).

Affected products

• Sophos Puremessage For Microsoft Exchange: version 3.0 only

Published 2009-08-27. Last modified 2026-06-16.