Sophos Puremessage For Microsoft Exchange vulnerabilities

3 CVEs affecting Sophos Puremessage For Microsoft Exchange, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-7106, published 2009-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-7105, published 2009-08-27. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text…
CVE-2008-7104, published 2009-08-27. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam…
CVE-2008-7106, published 2009-08-27. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system…