{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sophos Anti-Virus 3.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sophos",
          "scada": false
        }
      }
    },
    {
      "description": "Sophos MailMonitor 2.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sophos",
          "scada": false
        }
      }
    },
    {
      "description": "Sophos Anti-Virus 5.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sophos",
          "scada": false
        }
      }
    },
    {
      "description": "Sophos PureMessage 4.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sophos",
          "scada": false
        }
      }
    },
    {
      "description": "Sophos Anti-Virus 4.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sophos",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans la mise en \u0153uvre de l\u0027examen des archives ZIP\nutilisant l\u0027algorithme de compression bzip2 par les produits Sophos\nAnti-Virus permet \u00e0 un utilisateur distant mal intentionn\u00e9 de provoquer\nun d\u00e9ni de service par le biais d\u0027une archive malicieusement construite.\n\n## Solution\n\n-   Les versions suivantes de Sophos Anti-Virus corrigent le probl\u00e8me :\n    -   Sophos Anti-Virus 3.95.0 toutes platformes ;\n    -   Sophos Anti-Virus 4.5.3 pour Windows NT, 95/98/Me ;\n    -   Sophos Anti-Virus 5.0.4 pour Windows 2000/XP/2003.\n-   Appliquer les derni\u00e8res mises \u00e0 jour de MailMonitor et PureMessage.\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 iDEFENSE du 14 juillet 2005 :",
      "url": "http://www.idefense.com/application/poi/display?id=283\u0026type=vulnerabilities"
    }
  ],
  "reference": "CERTA-2005-AVI-266",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 des produits Sophos Anti-Virus permet \u00e0 un utilisateur\nmal intentionn\u00e9 de provoquer un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de Sophos Anti-Virus",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 de iDEFENSE du 14 juillet 2005",
      "url": null
    }
  ]
}