CVE-2007-4512
- State
- Published
- Severity
- Not scored
- Published
- Sep 10, 2007
- Updated
- Aug 7, 2024
- Reserved
- Aug 23, 2007
Description
Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 3107third-party-advisory
- ADV-2007-3077vdb-entry
- http://www.sophos.com/support/knowledgebase/article/29150.html
- 37527vdb-entry
- 26714third-party-advisory
- sophos-zip-xss(36478)vdb-entry
- 20070906 Sophos Anti-Virus 6.5.4 Vulnerabilitymailing-list
- 25572vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.