CVE-2006-0994: sophos sophos_anti-virus

EPSS trend

Probability

21.63%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 21.63% on 21-09-2026

21-09-202621-10-2026

EPSS score

21.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

www.zerodayinitiative.com/advisories/ZDI-06-012.htmlX Refsource MISCThird Party AdvisoryVDB Entry
securitytracker.com/id?1016041VDB EntryX Refsource SECTRACKThird Party Advisory
securityreason.com/securityalert/869Third Party AdvisoryX Refsource SREASON
exchange.xforce.ibmcloud.com/vulnerabilities/26305VDB EntryX Refsource XFThird Party Advisory
lists.grok.org.uk/pipermail/full-disclosure/2006-May/045897.htmlMailing ListX Refsource FULLDISCThird Party Advisory
www.securityfocus.com/bid/17876VDB EntryX Refsource BIDThird Party Advisory
www.securityfocus.com/archive/1/433272/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/20028Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/1730VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory

Related vulnerabilities

CVE-2007-4787sophosscanning_engine+15.67%19y ago10-09-2007 21:00The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.CVE-2014-1213sophosscanning_engine+10.97%12y ago10-02-2014 23:00Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumption, CPU consumption, and eventual crash) or spoof "ready for update" messages by performing certain operations on mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-****, (5) ReadyForUpdateSAV-Info, (6) SAV-****, (7) SAV-Info, (8) StateChange, (9) SuspendedSAV-****, (10) SuspendedSAV-Info, (11) UpdateComplete, (12) UpdateMutex, (13) UpdateRequest, or (14) SophosALMonSessionInstance, as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete, UpdateMutex, and UpdateRequest objects.CVE-2005-2768sophossophos_anti-virus12.70%21y ago02-09-2005 04:00Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.CVE-2005-1551sophossophos_anti-virus4.29%21y ago14-05-2005 04:00Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot.CVE-2005-1530sophossophos_anti-virus+36.16%21y ago19-07-2005 04:00Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.CVE-2005-4680sophossophos_anti-virus8.49%20y ago01-02-2006 02:00Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.

All vulnerabilities insophos_anti-virus

CVE-2006-0994: sophos sophos_anti-virus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References