← back
CVE-2006-5645

CVE-2006-5645

EPSS 17.4%
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/2912unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439http://secunia.com/advisories/22591http://securitytracker.com/id?1017132http://www.securityfocus.com/archive/1/474683/100/0/threadedhttp://www.securityfocus.com/bid/20816http://www.securitytracker.com/id?1018450http://www.sophos.com/support/knowledgebase/article/7609.htmlhttp://www.vupen.com/english/advisories/2006/4239