CVE:CVE-2007-4577
CNNVD:CNNVD-200708-454
Sophos Anti-Virus是英国Sophos公司的一套适用于多种操作系统的反病毒软件。该软件可实时侦测和清除病毒、间谍软件、木马和蠕虫，确保台式机和笔记本电脑的全面网络保护。
如果用户受骗打开了恶意的BZIP压缩文档的话，就可能触发死循环，导致引擎崩溃或临时文件耗尽所有磁盘空间。
solution:Upgrade sophos anti-virus to a higher version than 3.4.6,3.78,3.78d,3.79,3.80,3.81,3.82,3.83,3.84,3.85,3.86,3.90,3.91,3.95,3.96.0,4.03,4.04,4.05,4.5.3,4.5.4,4.5.11,4.5.12,4.7.1,4.7.2,5.0.1,5.0.2,5.0.4,5.0.9,5.1,5.2,5.2.1,6.5,and avoid the version 3.4.6,3.78,3.78d,3.79,3.80,3.81,3.82,3.83,3.84,3.85,3.86,3.90,3.91,3.95,3.96.0,4.03,4.04,4.05,4.5.3,4.5.4,4.5.11,4.5.12,4.7.1,4.7.2,5.0.1,5.0.2,5.0.4,5.0.9,5.1,5.2,5.2.1,6.5; Upgrade sophos scanning_engine to a higher version than 2.30.4,2.40.2,and avoid the version 2.30.4,2.40.2; Upgrade sophos small_business_suite to a higher version than 4.04,4.05,and avoid the version 4.04,4.05