NVD

Id
64881  
Name
CVE-2006-6335  
Description
Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and (2) a CPIO archive, with a long filename that is not null-terminated, which triggers a stack-based overflow in veex.dll.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-12  
Modified Date
2011-03-07  
Seq
2006-6335  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
338812 64881 CVE-2006-6335 20061212 ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability  View
338813 64881 CVE-2006-6335 20061212 ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability  View
338814 64881 CVE-2006-6335 21563  View
338815 64881 CVE-2006-6335 http://www.sophos.com/support/knowledgebase/article/17340.html  View
338816 64881 CVE-2006-6335 http://www.sophos.com/support/knowledgebase/article/21637.html  View
338817 64881 CVE-2006-6335 ADV-2006-4919  View
338818 64881 CVE-2006-6335 http://www.zerodayinitiative.com/advisories/ZDI-06-045.html  View
338819 64881 CVE-2006-6335 http://www.zerodayinitiative.com/advisories/ZDI-06-046.html  View
338820 64881 CVE-2006-6335 sophos-cpio-bo(30851)  View
338821 64881 CVE-2006-6335 sophos-sit-bo(30852)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61280 JVNDB-2006-003546 Sophos Anti-Virus スキャンエンジンにおけるバッファオーバーフローの脆弱性 Sophos Anti-Virus スキャンエンジンには、バッファオーバーフローの脆弱性が存在します。 CVE-2006-6335 22437 CVE-2006-6335 64881 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003546.html 2006-12-12 2012-12-20 View