CVE-2005-1530

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-07-19 · updated 2026-06-16

Description

Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.

Affected products

Sophos Anti-Virus: 3.4.6, 3.78, 3.78d, 3.79, 3.80, 3.81 (+8)
Sophos Mailmonitor: 2.0, 2.1
Sophos Mailmonitor For Notes Domino: all versions
Sophos Puremessage Anti-Virus: 4.6
Sophos Small Business Suite: 1.0

References

http://securitytracker.com/id?1014488
http://www.idefense.com/application/poi/display?id=283&type=vulnerabilities&flashstatus=true
http://www.securityfocus.com/bid/14270
https://exchange.xforce.ibmcloud.com/vulnerabilities/21373
http://securitytracker.com/id?1014488
http://www.idefense.com/application/poi/display?id=283&type=vulnerabilities&flashstatus=true
http://www.securityfocus.com/bid/14270
https://exchange.xforce.ibmcloud.com/vulnerabilities/21373

Get alerted when CVE-2005-1530 or the next vulnerability affects your stack