CVE-2008-1737

CVE-2008-1737 describes a denial-of-service vulnerability in Sophos Anti-Virus 7.x, specifically when Runtime Behavioral Analysis is enabled. A local attacker can trigger a system reboot and disable the antivirus product, potentially leading to privilege escalation, by providing a zero value in a length field to the NtCreateKey function. The vulnerability has a CVSS score of 6.9 (high severity), indicating a local attack vector with medium complexity and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.