Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").
結論預警: CVE-2007-4577 綜合評估為中等風險（63.3/100）：CVSS 技術影響為高級，利用機率偏高（EPSS 5.53%，百分位 92%） 核心證據: EPSS 顯示該漏洞近期被利用的可能性處於高位。 強制指令: 被利用機率偏高—請盤點暴露面並優先安排修補。
風險隨態勢動態變化；本站持續評估並同步更新本頁展示內容。
EPSS 日更估計相對被利用可能性；百分位表示該 CVE 在已評分漏洞中的相對排名（越高表示相對更嚴重）。
| # | 日期 | 舊 EPSS 分數 | 新 EPSS 分數 | 變化（新 − 舊） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 5.56% | 5.53% | -0.03% |
| 2 | 2026-04-16 | 5.36% | 5.56% | +0.21% |
| 3 | 2025-03-30 | — | 5.36% | — |
完整 EPSS 歷史 （共 16 筆）
該 CVE 的 CVSS 指標。
| 底座分 | 版本 | 嚴重度 | 向量 | 可利用性 | 影響 | 分數來源 |
|---|---|---|---|---|---|---|
| 7.8 | 2.0 | HIGH |
|
10.0 | 6.9 | [email protected] |
| 廠商 | 產品 | 版本 | 原始 CPE |
|---|---|---|---|
| sophos | anti-virus | 3.4.6 | cpe:2.3:a:sophos:anti-virus:3.4.6:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.78 | cpe:2.3:a:sophos:anti-virus:3.78:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.78d | cpe:2.3:a:sophos:anti-virus:3.78d:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.79 | cpe:2.3:a:sophos:anti-virus:3.79:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.80 | cpe:2.3:a:sophos:anti-virus:3.80:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.81 | cpe:2.3:a:sophos:anti-virus:3.81:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.82 | cpe:2.3:a:sophos:anti-virus:3.82:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.83 | cpe:2.3:a:sophos:anti-virus:3.83:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.84 | cpe:2.3:a:sophos:anti-virus:3.84:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.85 | cpe:2.3:a:sophos:anti-virus:3.85:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.86 | cpe:2.3:a:sophos:anti-virus:3.86:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.90 | cpe:2.3:a:sophos:anti-virus:3.90:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.91 | cpe:2.3:a:sophos:anti-virus:3.91:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.95 | cpe:2.3:a:sophos:anti-virus:3.95:*:*:*:*:*:*:* |
| sophos | anti-virus | 3.96.0 | cpe:2.3:a:sophos:anti-virus:3.96.0:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.03 | cpe:2.3:a:sophos:anti-virus:4.03:*:linux:*:*:*:*:* |
| sophos | anti-virus | 4.04 | cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.05 | cpe:2.3:a:sophos:anti-virus:4.05:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.5.3 | cpe:2.3:a:sophos:anti-virus:4.5.3:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.5.4 | cpe:2.3:a:sophos:anti-virus:4.5.4:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.5.11 | cpe:2.3:a:sophos:anti-virus:4.5.11:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.5.12 | cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.7.1 | cpe:2.3:a:sophos:anti-virus:4.7.1:*:*:*:*:*:*:* |
| sophos | anti-virus | 4.7.2 | cpe:2.3:a:sophos:anti-virus:4.7.2:*:*:*:*:*:*:* |
| sophos | anti-virus | 5.0.1 | cpe:2.3:a:sophos:anti-virus:5.0.1:*:*:*:*:*:*:* |
| sophos | anti-virus | 5.0.2 | cpe:2.3:a:sophos:anti-virus:5.0.2:*:*:*:*:*:*:* |
| sophos | anti-virus | 5.0.4 | cpe:2.3:a:sophos:anti-virus:5.0.4:*:*:*:*:*:*:* |
| sophos | anti-virus | 5.0.9 | cpe:2.3:a:sophos:anti-virus:5.0.9:*:*:*:*:*:*:* |
| sophos | anti-virus | 5.0.9 | cpe:2.3:a:sophos:anti-virus:5.0.9:*:linux:*:*:*:*:* |
| sophos | anti-virus | 5.1 | cpe:2.3:a:sophos:anti-virus:5.1:*:*:*:*:*:*:* |
| sophos | anti-virus | 5.2 | cpe:2.3:a:sophos:anti-virus:5.2:*:*:*:*:*:*:* |
| sophos | anti-virus | 5.2.1 | cpe:2.3:a:sophos:anti-virus:5.2.1:*:*:*:*:*:*:* |
| sophos | anti-virus | 6.5 | cpe:2.3:a:sophos:anti-virus:6.5:*:*:*:*:*:*:* |
| sophos | scanning_engine | 2.30.4 | cpe:2.3:a:sophos:scanning_engine:2.30.4:*:*:*:*:*:*:* |
| sophos | scanning_engine | 2.40.2 | cpe:2.3:a:sophos:scanning_engine:2.40.2:*:*:*:*:*:*:* |
| sophos | small_business_suite | 4.04 | cpe:2.3:a:sophos:small_business_suite:4.04:*:*:*:*:*:*:* |
| sophos | small_business_suite | 4.05 | cpe:2.3:a:sophos:small_business_suite:4.05:*:*:*:*:*:*:* |