CVE-2004-2075: Sophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a MIME head...

Security readout for executives and security teams

This is an old denial-of-service issue in Sophos Anti-Virus 3.78. A specially malformed MIME email header could make the scanner enter an infinite loop, potentially disrupting mail or file scanning. The supplied sources do not provide CVSS scoring, current exploit evidence, or detailed fix status. Exposure is likely limited to environments still running Sophos Anti-Virus 3.78, especially where it processes inbound email or MIME content. The supplied evidence does not identify operating systems, appliances, integrations, or later Sophos versions as affected. Prioritize confirmation rather than emergency response. This is a very old DoS issue with incomplete severity data and no active exploitation evidence in the supplied sources. It matters if legacy Sophos Anti-Virus 3.78 still protects mail or critical workflows. Mitigation focus: Check Sophos guidance for corrected builds or configuration advice.; Retire Sophos Anti-Virus 3.78 where it is still deployed.; Upgrade only to vendor-confirmed fixed versions or supported replacements..

Prepared

Jun 29, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.