[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability

Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available...

CVE-2006-5647

The CVE-2006-5647 issue affects Sophos Anti-Virus/Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and older platforms before 4.11. It is a CHM chunk header memory-corruption vulnerability triggered by malformed CHM files with a large name length; remote attackers could cause m...