CVE

Id
21749  
CVE No.
CVE-2006-5645  
Status
Candidate  
Description
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.  
Phase
Assigned (20061101)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208383 21749 CVE-2006-5645 IDEFENSE:20061208 Multiple Vendor Antivirus RAR File Denial of Service Vulnerability  View
208384 21749 CVE-2006-5645 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439  View
208385 21749 CVE-2006-5645 BUGTRAQ:20070726 RE: [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities  View
208386 21749 CVE-2006-5645 URL:http://www.securityfocus.com/archive/1/archive/1/474683/100/0/threaded  View
208387 21749 CVE-2006-5645 CONFIRM:http://www.sophos.com/support/knowledgebase/article/7609.html  View
208388 21749 CVE-2006-5645 BID:20816  View
208389 21749 CVE-2006-5645 URL:http://www.securityfocus.com/bid/20816  View
208390 21749 CVE-2006-5645 VUPEN:ADV-2006-4239  View
208391 21749 CVE-2006-5645 URL:http://www.vupen.com/english/advisories/2006/4239  View
208392 21749 CVE-2006-5645 SECTRACK:1017132  View
208393 21749 CVE-2006-5645 URL:http://securitytracker.com/id?1017132  View
208394 21749 CVE-2006-5645 SECTRACK:1018450  View
208395 21749 CVE-2006-5645 URL:http://www.securitytracker.com/id?1018450  View
208396 21749 CVE-2006-5645 SECUNIA:22591  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61122 JVNDB-2006-003388 Sophos Anti-Virus などのプラットフォーム用の Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性 Sophos Anti-Virus、Endpoint Security、Linux およびその他のプラットフォーム用の Anti-Virus には、サービス運用妨害 (メモリ破損) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2006-5647 21749 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003388.html  View