Approved changes feed: RSS · Atom

cpe:2.3:a:sophos:endpoint_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSophos (a481dca1-298d-56ee-9d5c-373f6e8cead2)
ProductEndpoint Security (63f47586-c92a-582c-80f9-756a5d4d2f0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5647 vulnerable 2026-06-03 14:27:46.389043 Details available
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk header, aka "CHM name length memory consumption vulnerability."
Published: 2006-11-01T15:00:00.000Z
Updated: 2024-08-07T19:55:53.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5646 vulnerable 2026-06-03 14:27:46.388394 Details available
Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0.
Published: 2006-11-01T15:00:00.000Z
Updated: 2024-08-07T19:55:54.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5645 vulnerable 2026-06-03 14:27:46.387633 Details available
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.
Published: 2006-11-01T15:00:00.000Z
Updated: 2024-08-07T19:55:54.155Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.