VULNERABILITY INTELLIGENCE

CVE-2004-0552

CVSS score7.5 HIGH
EPSS probability23.87%
CISA KEVNot currently listed
Published2004-11-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

Primary references