PT-2008-6583 · Microsoft+1 · Internet Explorer+1

Xhakerman2006 · Publicado 2008-12-12 · Atualizado 2018-10-11 · CVE-2008-5522

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus version 8.0.0.161

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename extension to have no extension, a .txt extension, or a .jpg extension. This can be exploited when using Internet Explorer 6 or 7.

Recommendations For AVG Anti-Virus version 8.0.0.161, consider updating the software to a version that includes a fix for this issue, as using outdated versions may leave systems vulnerable to malware bypass attacks.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5522

Produtos afetados

Avg Anti-Virus

Internet Explorer

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5522 · Nota de Segurança
• http://securityfocus.com/archive/1/499043/100/0/threaded · Nota
• http://securityreason.com/securityalert/4723 · Nota
• http://securityfocus.com/archive/1/498995/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Nota