[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability

Sophos Antivirus CHM File Heap Overflow Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available on the vendors...

CVE-2006-5646

CVE-2006-5646 is a heap-based buffer overflow in Sophos products when archive scanning is enabled. A CHM file with an LZX decompression header that specifies Window_size = 0 can cause memory corruption leading to a denial of service. Affected are Sophos Anti-Virus and Endpoint Security before 6.0...