Sophos Small Business Suite vulnerabilities

3 CVEs affecting Sophos Small Business Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4578, published 2007-08-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0552, published 2004-11-03. High severity, CVSS 7.5. EPSS: 23.9% chance of exploitation in the next 30 days. Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow…
CVE-2007-4578, published 2007-08-28. Medium severity, CVSS 6.8. EPSS: 7.3% chance of exploitation in the next 30 days. Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file,…
CVE-2007-4577, published 2007-08-28. High severity, CVSS 7.8. EPSS: 5.5% chance of exploitation in the next 30 days. Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary…