CVE-2006-6335
CVE-2006-6335 is a critical-severity vulnerability in Sophos Sophos Anti-virus with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 12% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sophos Sophos Anti-virus
- Published:
- Last modified:
Description
Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and (2) a CPIO archive, with a long filename that is not null-terminated, which triggers a stack-based overflow in veex.dll.
Frequently asked questions
- What is CVE-2006-6335?
- Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and (2) a CPIO archive, with a long filename that is not null-terminated, which triggers a stack-based overflow in veex.dll.
- How severe is CVE-2006-6335?
- CVE-2006-6335 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2006-6335 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-6335?
- CVE-2006-6335 affects Sophos Sophos Anti-virus. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2006-6335?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2006-6335 published?
- CVE-2006-6335 was published on 2006-12-12 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/23325
- http://www.securityfocus.com/archive/1/454197/100/0/threaded
- http://www.securityfocus.com/archive/1/454211/100/0/threaded
- http://www.securityfocus.com/bid/21563
- http://www.sophos.com/support/knowledgebase/article/17340.html
- http://www.sophos.com/support/knowledgebase/article/21637.html
- http://www.vupen.com/english/advisories/2006/4919
- http://www.zerodayinitiative.com/advisories/ZDI-06-045.html
- http://www.zerodayinitiative.com/advisories/ZDI-06-046.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30851
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30852
Affected products (1)
- cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*
More vulnerabilities in Sophos Sophos Anti-virus
- CVE-2006-0994 — High (CVSS 7.5): Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when…
- CVE-2005-2768 — High (CVSS 7.5): Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and…
- CVE-2004-0937 — High (CVSS 7.5): Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote…
- CVE-2004-0935 — High (CVSS 7.5): Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a…
- CVE-2004-0936 — High (CVSS 7.5): RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global…
- CVE-2004-0934 — High (CVSS 7.5): Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and…