What’s Vulnerable › Vulnerabilities

CVE-2005-2768

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-09-02 · updated 2026-06-16

Description

Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.

Affected products

• Sophos Anti-Virus: 3.4.6, 3.78, 3.78d, 3.79, 3.80, 3.81 (+11)

References

• http://marc.info/?l=bugtraq&m=112511873420953&w=2
• http://secunia.com/advisories/16245/
• http://www.rem0te.com/public/images/sophos.pdf
• http://www.securityfocus.com/bid/14362
• http://www.sophos.com/support/knowledgebase/article/3409.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21608
• http://marc.info/?l=bugtraq&m=112511873420953&w=2
• http://secunia.com/advisories/16245/
• http://www.rem0te.com/public/images/sophos.pdf
• http://www.securityfocus.com/bid/14362
• http://www.sophos.com/support/knowledgebase/article/3409.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21608

Get alerted when CVE-2005-2768 or the next vulnerability affects your stack