CVE:CVE-2020-9363
CNNVD:CNNVD-202002-1108
Sophos Intercept X Endpoint是英国Sophos公司的一种端点保护。用于阻止最新的网络安全威胁。
多款Sophos产品中的AV解析引擎（2020-01-14之前版本）中存在输入验证错误漏洞。攻击者可借助特制的ZIP文件利用该漏洞绕过病毒检查。以下产品及版本受到影响：Endpoint Protection；Cloud Optix；Mobile；Intercept X Endpoint；Intercept X for Server；Secure Web Gateway。
solution:Upgrade sophos cloud_optix to a higher version than 2020-01-14,and avoid the version (,2020-01-14); Upgrade sophos endpoint_protection to a higher version than 2020-01-14,and avoid the version (,2020-01-14); Upgrade sophos intercept_x_endpoint to a higher version than 2020-01-14,and avoid the version (,2020-01-14); Upgrade sophos intercept_x_for_server to a higher version than 2020-01-14,and avoid the version (,2020-01-14); Upgrade sophos mobile to a higher version than 2020-01-14,and avoid the version (,2020-01-14); Upgrade sophos secure_web_gateway to a higher version than 2020-01-14,and avoid the version (,2020-01-14)