{"id":"CVE-2005-4680","state":"PUBLISHED","title":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which ","description":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.","publishedAt":"2006-02-01T02:00:00.000Z","updatedAt":"2024-08-07T23:53:28.478Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.vupen.com/english/advisories/2006/0347","http://www.sophos.com/support/knowledgebase/article/3803.html","https://exchange.xforce.ibmcloud.com/vulnerabilities/24345"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:28.800Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2005/4xxx/CVE-2005-4680.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2005-4680","state":"PUBLISHED","datePublished":"2006-02-01T02:00:00.000Z","dateUpdated":"2024-08-07T23:53:28.478Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2006-01-31T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/0347","name":"ADV-2006-0347","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.sophos.com/support/knowledgebase/article/3803.html","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24345","name":"sophos-arj-scanning-bypass(24345)","tags":["vdb-entry","x_refsource_XF"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2005-10-11T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-4680","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ADV-2006-0347","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/0347"},{"name":"http://www.sophos.com/support/knowledgebase/article/3803.html","refsource":"CONFIRM","url":"http://www.sophos.com/support/knowledgebase/article/3803.html"},{"name":"sophos-arj-scanning-bypass(24345)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24345"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.vupen.com/english/advisories/2006/0347","name":"ADV-2006-0347","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.sophos.com/support/knowledgebase/article/3803.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24345","name":"sophos-arj-scanning-bypass(24345)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T23:53:28.478Z"}}]}}}