Description
Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.zerodayinitiative.com/advisories/ZDI-06-012.html ↗
- http://securitytracker.com/id?1016041 ↗
- http://securityreason.com/securityalert/869 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26305 ↗
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045897.html ↗
- http://www.securityfocus.com/bid/17876 ↗
- http://www.securityfocus.com/archive/1/433272/100/0/threaded ↗
- http://secunia.com/advisories/20028 ↗
- http://www.vupen.com/english/advisories/2006/1730 ↗