CVE-2008-6903: Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X...

Security readout for executives and security teams

This is an old Sophos Anti-Virus denial-of-service issue. If CAB archive scanning is enabled, a specially malformed CAB file can crash affected Sophos scanning components. The main business risk is loss or disruption of malware scanning on legacy systems, not data theft or remote code execution based on the supplied sources. Exposure is most likely in environments still running legacy Sophos Anti-Virus releases from before the listed fixed versions with CAB archive scanning enabled. Modern Sophos deployments are unlikely to be affected, but the source bundle does not confirm current product lineage or automatic update behavior. Treat this as a legacy exposure cleanup item unless affected Sophos versions are still deployed in file-ingestion paths. It is not KEV-listed and has no sourced active exploitation claim, but it can impair antivirus availability where vulnerable scanners remain in production. Mitigation focus: Upgrade Sophos Anti-Virus to the fixed or later versions listed in the CVE.; Check Sophos vendor guidance before changing CAB archive scanning behavior.; Retire or isolate unsupported legacy Sophos installations that cannot be upgraded..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.