CVE-2006-0994

Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption.

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045897.htmlThird Party Advisory
• http://secunia.com/advisories/20028Third Party Advisory
• http://securityreason.com/securityalert/869Third Party Advisory
• http://securitytracker.com/id?1016041Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/433272/100/0/threaded
• http://www.securityfocus.com/bid/17876Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/1730Permissions Required, Third Party Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-012.htmlThird Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26305Third Party Advisory, VDB Entry
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045897.htmlThird Party Advisory
• http://secunia.com/advisories/20028Third Party Advisory
• http://securityreason.com/securityalert/869Third Party Advisory
• http://securitytracker.com/id?1016041Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/433272/100/0/threaded
• http://www.securityfocus.com/bid/17876Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/1730Permissions Required, Third Party Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-012.htmlThird Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26305Third Party Advisory, VDB Entry

Published

May 10, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0988The default configuration of the DNS Server service on Windo…
• CVE-2006-0989Stack-based buffer overflow in the volume manager daemon (vm…
• CVE-2006-0990Stack-based buffer overflow in the NetBackup Catalog daemon …
• CVE-2006-0991Buffer overflow in the NetBackup Sharepoint Services server …
• CVE-2006-0992Stack-based buffer overflow in Novell GroupWise Messenger be…
• CVE-2006-0993The web management interface in 3Com TippingPoint SMS Server…
• CVE-2006-0995EMC Dantz Retrospect 7 backup client 7.0.107, and other vers…
• CVE-2006-0996Cross-site scripting (XSS) vulnerability in phpinfo (info.c)…
• CVE-2006-0997The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-0998The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-0999The SSL server implementation in NILE.NLM in Novell NetWare …
• CVE-2006-1000Multiple SQL injection vulnerabilities in Pentacle In-Out Bo…