CVE-2006-5645

Related Files

iDEFENSE Security Advisory 2006-12-08.1

Posted Dec 11, 2006

Authored by iDefense Labs, Damian Put, Titon | Site idefense.com

iDefense Security Advisory 12.08.06 - Remote exploitation of a denial of service vulnerability in Multiple Vendors' Antivirus engines allows an attacker to cause the engines to consume excessive resources. The affected vendors' scan engines are vulnerable to a DoS attack when scanning specially malformed RAR archives. Specifically, the malformed archives will have the head_size and pack_size fields set to zero in Archive Header section. When such a file is encountered, the affected scan engines will enter an infinite loop. Confirmed systems affected: Sophos Small business edition (Windows/Linux) 4.06.1 with engine version 2.34.3. Trend Micro PC Cillin - Internet Security 2006. Trend Micro Office Scan 7.3. Trend Micro Server Protect 5.58.

tags | advisory, remote, denial of service

systems | linux, windows

advisories | CVE-2006-5645

SHA-256 | 67c4a280c65b80adddfea7555c151689fa0a7b7c4e14641e6726e9b11f3ce9f5

Download | Favorite | View