Denial of Service in Sophos Anti-Virus Due to Bzip2 Archive Processing
CVE-2005-1530

Currently unrated

Key Information:

Vendor: Sophos
Status: Sophos Small Business Suite; Sophos Anti-virus; Sophos Mailmonitor For Notes Domino; Sophos Mailmonitor
Vendor: CVE Published:; 19 July 2005

What is CVE-2005-1530?

A flaw in Sophos Anti-Virus 5.0.1, particularly when the 'Scan inside archive files' feature is enabled, allows remote attackers to exploit a vulnerability in the processing of Bzip2 archives. An attacker can create a specially crafted Bzip2 archive with an oversized 'Extra field length', resulting in excessive CPU usage due to an infinite loop, leading to potential denial of service. Users are advised to review security practices and limit the usage of this feature to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch