CVE-2006-5646: Buffer Overflow
Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Windowsize of 0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5646?
CVE-2006-5646 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2006-5646?
To fix CVE-2006-5646, upgrade Sophos Anti-Virus and Endpoint Security to version 6.0.5 or later.
Which versions are affected by CVE-2006-5646?
CVE-2006-5646 affects versions of Sophos Anti-Virus before 6.0.5 and specific versions of Anti-Virus for Linux before 5.0.10.
What type of vulnerability is CVE-2006-5646?
CVE-2006-5646 is a heap-based buffer overflow vulnerability.
Can CVE-2006-5646 be exploited remotely?
Yes, CVE-2006-5646 can be exploited remotely by sending a malicious CHM file to the target system.