1. CVE-Search
  2. CVE-2006-0994
ID CVE-2006-0994
Summary Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption. The vendor has issued a fixed version
References
Vulnerable Configurations
  • cpe:2.3:a:sophos:sophos_anti-virus:4.02:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:4.02:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:4.04:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:4.04:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:4.04:-:windows:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:4.04:-:windows:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:sophos_anti-virus:5.2.0:-:windows:*:*:*:*:*
    cpe:2.3:a:sophos:sophos_anti-virus:5.2.0:-:windows:*:*:*:*:*
CVSS
Base: 7.5 (as of 18-10-2018 - 16:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 17876
bugtraq 20060508 ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability
fulldisc 20060508 ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability
misc http://www.zerodayinitiative.com/advisories/ZDI-06-012.html
sectrack 1016041
secunia 20028
sreason 869
vupen ADV-2006-1730
xf sophos-cab-parsing-bo(26305)
Last major update 18-10-2018 - 16:30
Published 10-05-2006 - 10:02
Last modified 18-10-2018 - 16:30
Back to Top