https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-1213.htmlhttps://patchthecve.com/cve/CVE-2014-1213.htmlWed, 17 Jun 2026 00:04:32 +0000MEDIUM 5.6: Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumptiohttps://patchthecve.com/cve/CVE-2008-3447.htmlhttps://patchthecve.com/cve/CVE-2008-3447.htmlTue, 16 Jun 2026 22:55:50 +0000MEDIUM 5.0: The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets.https://patchthecve.com/cve/CVE-2008-3244.htmlhttps://patchthecve.com/cve/CVE-2008-3244.htmlTue, 16 Jun 2026 22:55:27 +0000MEDIUM 4.3: The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service (engine crash) via a CHM file with a large nb_dir value that triggers an out-of-bounds read.https://patchthecve.com/cve/CVE-2008-3243.htmlhttps://patchthecve.com/cve/CVE-2008-3243.htmlTue, 16 Jun 2026 22:55:27 +0000MEDIUM 4.3: Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via (1) a crafted UPX-compressed file, which triggers an engine crash; (2) a crafted Microsoft Office file, which triggers an infinite loop;https://patchthecve.com/cve/CVE-2007-4787.htmlhttps://patchthecve.com/cve/CVE-2007-4787.htmlTue, 16 Jun 2026 22:44:47 +0000MEDIUM 5.0: The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.https://patchthecve.com/cve/CVE-2007-4578.htmlhttps://patchthecve.com/cve/CVE-2007-4578.htmlTue, 16 Jun 2026 22:44:22 +0000MEDIUM 6.8: Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researchttps://patchthecve.com/cve/CVE-2007-4577.htmlhttps://patchthecve.com/cve/CVE-2007-4577.htmlTue, 16 Jun 2026 22:44:22 +0000HIGH 7.8: Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").