CVE-2006-0994: High severity Sophos Anti-Virus vulnerability
Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0994?
CVE-2006-0994 is considered a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2006-0994?
To fix CVE-2006-0994, upgrade to Sophos Anti-Virus version 5.2.1 or later, or 4.05 or later.
What products are affected by CVE-2006-0994?
CVE-2006-0994 affects multiple versions of Sophos Anti-Virus, specifically versions prior to 5.2.1 and 4.05.
What is the nature of the vulnerability described in CVE-2006-0994?
CVE-2006-0994 is a vulnerability that allows remote attackers to execute arbitrary code through specially crafted CAB files.
Is cabinet file inspection a security risk as noted in CVE-2006-0994?
Yes, enabling cabinet file inspection increases the risk, as it can lead to heap corruption if exploited.