CVE-2006-0994

Currently unrated

Key Information:

Vendor
Sophos
Status
Sophos Anti-virus
Vendor
CVE Published:
10 May 2006

Summary

Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption.

References

http://www.zerodayinitiative.com/advisories/ZDI-06-012.html
x_refsource_MISC
http://securitytracker.com/id?1016041
vdb-entryx_refsource_SECTRACK
http://securityreason.com/securityalert/869
third-party-advisoryx_refsource_SREASON

EPSS Score

42% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.