CVE-2006-5646

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus...

5.0 MediumPublic exploit

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0.

Exploit likelihood

17.9%Up 11.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2006-5646
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-5646
Updated: 2026-11-02

EUVDEUVD-2006-5631 No score

Record: EUVD-2006-5631
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cmj2-m79r-9mvg No score

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus...

Record: GHSA-cmj2-m79r-9mvg
Weakness: CWE-119
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Sophos AntiVirus - '.CHM' File Heap Overflow (PoC)	2006-12-10

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-5646 is a medium vulnerability (CVSS 5.0) in Sophos Anti-virus, published November 1, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 17.9%, the 97th percentile. No source names a fixed version.