1. CVE-Search
  2. CVE-2006-5645
ID CVE-2006-5645
Summary Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.
References
Vulnerable Configurations
  • cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:4.05:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.05:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:4.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:4.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:4.5.11:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:4.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:4.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:4.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:5.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:5.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:5.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:5.2:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:5.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:5.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:anti-virus:6.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:anti-virus:6.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*
    cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 17-10-2018 - 21:44)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 20816
bugtraq 20070726 RE: [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities
confirm http://www.sophos.com/support/knowledgebase/article/7609.html
idefense 20061208 Multiple Vendor Antivirus RAR File Denial of Service Vulnerability
sectrack
  • 1017132
  • 1018450
secunia 22591
vupen ADV-2006-4239
Last major update 17-10-2018 - 21:44
Published 01-11-2006 - 15:07
Last modified 17-10-2018 - 21:44
Back to Top