Unrated severityNVD Advisory· Published Nov 1, 2006· Updated Jun 16, 2026
CVE-2006-5645
CVE-2006-5645
Description
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:sophos:anti-virus:4.04:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:4.05:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:4.5.11:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:4.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:4.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:4.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:4.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:5.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:sophos:anti-virus:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*range: <=6.04
- (no CPE)range: <6.0.5
- Range: <6.0.5
- Range: <5.0.10
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/22591nvdVendor Advisory
- www.vupen.com/english/advisories/2006/4239nvdVendor Advisory
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/474683/100/0/threadednvd
- www.securityfocus.com/bid/20816nvd
- www.securitytracker.com/idnvd
- www.sophos.com/support/knowledgebase/article/7609.htmlnvd
News mentions
0No linked articles in our index yet.