Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
Affected Platforms
Sophos Sophos MailmonitorSophos Sophos Mailmonitor For Notes DominoSophos Sophos Anti-VirusSophos Sophos Small Business SuiteSophos Sophos Puremessage Anti-Virus