Skip to main content

Resource Management Errors

CVE-2006-5645

Medium
5/10

Summary

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.

  • LOW
  • NETWORK
  • NONE
  • NONE
  • NONE
  • PARTIAL

CWE-399 - Resource Management Errors

Resource management errors is not a weakness in and of itself, rather it is a category of weaknesses related to improper management of system resources. If not addressed, the weaknesses in this category can lead to unexpected software behavior, loss of access, file modification, sensitive information disclosure, system crash, denial of service, and code execution.

References

Advisory Timeline

  • Published