>> Sophos AntiVirus Scan Engine CPIO and SIT Files Handling Code Execution Vulnerabilities
Title : Sophos AntiVirus Scan Engine CPIO and SIT Files Handling Code Execution Vulnerabilities VUPEN ID : VUPEN/ADV-2006-4919 CVE ID : CVE-2006-6335
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-12-09
Technical Description
Multiple vulnerabilities have been identified in various Sophos Anti-Virus products, which could be exploited by attackers or malware to take complete control of an affected system or cause a denial of service.
The first issue is due to a buffer overflow error when handling SIT files with long non-null terminated filenames, which could be exploited by attackers to execute arbitrary commands on a system protected by a vulnerable application.
The second vulnerability is due to a buffer overflow error when handling a CPIO file with a long
non-null terminated filename, which could be exploited by attackers to compromise a vulnerable system via a specially crafted file.
