The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
结论预警: CVE-2007-4787 综合评估为中等风险（54.2/100）：CVSS 技术影响为中级，利用概率偏高（EPSS 5.67%，百分位 92%） 核心证据: EPSS 显示该漏洞近期被利用的可能性处于高位。 近一日 EPSS 上升 +2.03%，被利用关注度持续升高。 强制指令: 被利用概率偏高—请排查暴露面并优先安排修补。
风险随态势动态变化；本站持续评估并同步更新本页展示内容。
EPSS 日更估计相对被利用可能性；百分位表示该 CVE 在已评分漏洞中的相对排名（越高表示相对更严重）。
| # | 日期 | 旧 EPSS 分数 | 新 EPSS 分数 | 变化（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 3.63% | 5.67% | +2.03% |
| 2 | 2026-04-29 | 1.93% | 3.63% | +1.70% |
| 3 | 2025-11-25 | — | 1.93% | — |
完整 EPSS 历史 （共 17 条）
该 CVE 的 CVSS 指标。
| 底座分 | 版本 | 严重度 | 向量 | 可利用性 | 影响 | 分数来源 |
|---|---|---|---|---|---|---|
| 5.0 | 2.0 | MEDIUM |
|
10.0 | 2.9 | [email protected] |
| 厂商 | 产品 | 版本 | 原始 CPE |
|---|---|---|---|
| sophos | scanning_engine | 2.30.4 | cpe:2.3:a:sophos:scanning_engine:2.30.4:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.4.6 | cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.78 | cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.78d | cpe:2.3:a:sophos:sophos_anti-virus:3.78d:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.79 | cpe:2.3:a:sophos:sophos_anti-virus:3.79:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.80 | cpe:2.3:a:sophos:sophos_anti-virus:3.80:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.81 | cpe:2.3:a:sophos:sophos_anti-virus:3.81:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.82 | cpe:2.3:a:sophos:sophos_anti-virus:3.82:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.83 | cpe:2.3:a:sophos:sophos_anti-virus:3.83:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.84 | cpe:2.3:a:sophos:sophos_anti-virus:3.84:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.85 | cpe:2.3:a:sophos:sophos_anti-virus:3.85:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.86 | cpe:2.3:a:sophos:sophos_anti-virus:3.86:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.90 | cpe:2.3:a:sophos:sophos_anti-virus:3.90:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.91 | cpe:2.3:a:sophos:sophos_anti-virus:3.91:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.95 | cpe:2.3:a:sophos:sophos_anti-virus:3.95:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 3.96 | cpe:2.3:a:sophos:sophos_anti-virus:3.96:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.04 | cpe:2.3:a:sophos:sophos_anti-virus:4.04:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.05 | cpe:2.3:a:sophos:sophos_anti-virus:4.05:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.5.3 | cpe:2.3:a:sophos:sophos_anti-virus:4.5.3:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.5.4 | cpe:2.3:a:sophos:sophos_anti-virus:4.5.4:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.5.11 | cpe:2.3:a:sophos:sophos_anti-virus:4.5.11:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.5.12 | cpe:2.3:a:sophos:sophos_anti-virus:4.5.12:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.7.1 | cpe:2.3:a:sophos:sophos_anti-virus:4.7.1:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 4.7.2 | cpe:2.3:a:sophos:sophos_anti-virus:4.7.2:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 5.0.1 | cpe:2.3:a:sophos:sophos_anti-virus:5.0.1:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 5.0.2 | cpe:2.3:a:sophos:sophos_anti-virus:5.0.2:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 5.0.4 | cpe:2.3:a:sophos:sophos_anti-virus:5.0.4:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 5.1 | cpe:2.3:a:sophos:sophos_anti-virus:5.1:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 5.2.0 | cpe:2.3:a:sophos:sophos_anti-virus:5.2.0:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 5.2.1 | cpe:2.3:a:sophos:sophos_anti-virus:5.2.1:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 6.0 | cpe:2.3:a:sophos:sophos_anti-virus:6.0:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 6.5 | cpe:2.3:a:sophos:sophos_anti-virus:6.5:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 6.5.4_r2 | cpe:2.3:a:sophos:sophos_anti-virus:6.5.4_r2:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 6.5.8 | cpe:2.3:a:sophos:sophos_anti-virus:6.5.8:*:*:*:*:*:*:* |
| sophos | sophos_anti-virus | 7.0 | cpe:2.3:a:sophos:sophos_anti-virus:7.0:*:*:*:*:*:*:* |