{"id":"CVE-2005-4680","aliases":["EUVD-2005-4674","GHSA-25c5-5c5w-53xq"],"status":"published","title":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow...","description":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.08486,"percentile":0.95066,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-12-31T05:00:00Z","modified":"2026-06-16T22:19:13Z","products":[{"vendor":"sophos","product":"sophos_anti-virus"}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/0347","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"http://www.sophos.com/support/knowledgebase/article/3803.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24345","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-4680"},{"url":"https://github.com/advisories/GHSA-25c5-5c5w-53xq"}],"sources":{"cve":[{"id":"CVE-2005-4680","description":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.","status":"published","published":"2006-02-01T02:00:00Z","modified":"2024-08-07T23:53:28.478Z","updated_at":"2026-11-02T14:33:39.259087Z"}],"euvd":[{"id":"EUVD-2005-4674","description":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.","status":"published","published":"2006-02-01T02:00:00Z","modified":"2024-08-07T23:53:28Z","updated_at":"2026-11-03T01:15:21.468625Z"}],"ghsa":[{"id":"GHSA-25c5-5c5w-53xq","title":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow...","description":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.","status":"published","published":"2022-05-01T02:29:45Z","modified":"2023-01-30T05:08:07Z","updated_at":"2026-11-02T14:47:48.188889Z"}],"nvd":[{"id":"CVE-2005-4680","description":"Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.","status":"published","published":"2005-12-31T05:00:00Z","modified":"2026-06-16T22:19:13.987Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:58.826417Z"}]}}