CVE-2008-1737: Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local...

Security readout for executives and security teams

This old Sophos Anti-Virus flaw could let a local user crash a Windows system so it reboots with Sophos disabled, and sources say privilege gain may be possible. Exposure appears limited to Sophos Anti-Virus 7.x with Runtime Behavioural Analysis enabled. No source in the bundle shows active exploitation. Most current environments should have low exposure unless they retain legacy Sophos Anti-Virus 7.x on Windows endpoints. Systems with local multi-user access, kiosk use, shared workstations, or weak endpoint hardening would carry higher practical risk. Prioritize as a legacy endpoint hygiene issue. It is not internet-facing and active exploitation is not evidenced here, but affected systems could lose antivirus protection after local abuse and may enable privilege escalation. Mitigation focus: Inventory endpoints for Sophos Anti-Virus 7.x, especially 7.0.5.; Check Sophos advisory KB 37810 for vendor-approved remediation.; Upgrade or replace affected legacy Sophos installations per vendor guidance..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.