CVE-2006-5645

CVE-2006-5645 describes a denial-of-service vulnerability affecting Sophos Anti-Virus and Endpoint Security products. Specifically, versions prior to 6.0.5 for Windows, 5.0.10 for Linux, and 4.11 for other platforms are susceptible when archive scanning is enabled. An unauthenticated remote attacker can trigger an infinite loop by providing a malformed RAR archive with zeroed head_size and pack_size fields in the Archive Header, leading to system unavailability. While a Proof-of-Concept exploit exists on ExploitDB, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage for this vulnerability.