Sophos Puremessage For Microsoft Exchange vulnerabilities
3 vulnerabilities
Known vulnerabilities in Sophos Puremessage For Microsoft Exchange, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2008-7105sophospuremessage_for_microsoft_exchange
EPSS score3.33%
Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to CVE-2008-7104.CVE-2008-7106sophospuremessage_for_microsoft_exchangeEPSS score2.58%
The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay).CVE-2008-7104sophospuremessage_for_microsoft_exchangeEPSS score3.33%
Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam rule update) via a crafted (1) RTF or (2) PDF file.