CVE-2006-5647

CVE-2006-5647 describes a memory corruption vulnerability in Sophos Anti-Virus and Endpoint Security products, specifically versions prior to 6.0.5 and 5.0.10 for Linux, respectively. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code through a specially crafted CHM file containing an excessively long name in its chunk header. The vulnerability has a CVSS score of 6.4, indicating a medium severity, with a network attack vector and low complexity, leading to potential partial integrity and availability impacts. While there is no evidence of active exploitation, a Proof-of-Concept exploit is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.