CVE-2006-5646

CVE-2006-5646 describes a heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security products, affecting versions prior to 6.0.5 for Windows and 5.0.10 for Linux, among others. This vulnerability allows remote attackers to cause a denial of service through memory corruption by providing a specially crafted CHM file with an LZX decompression header specifying a Window_size of 0, particularly when archive scanning is enabled. With a CVSS score of 5.0 and a FAUCET Risk Score of 97/100, it is considered a moderate to high-risk vulnerability, despite its low EPSS score. While not currently on the KEV catalog or Hot List, a proof-of-concept exploit exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.