Cloudanix VulnDB

CVE-2004-0552

None

CVSS

—

EPSS

23.9%

Published

Nov 3, 2004

CISA due date

—

The record

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

Affected packages

Ecosystem Package Introduced Fixed