CVE-2006-0994

HIGH · CVSS 7.5 EPSS 21.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-05-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-0994

Severity

HIGH

CVSS

7.5

EPSS

21.63%

Windows

Original NVD Description

Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption.