PT-2008-6590 · Ca · Ca Etrust Vet Antivirus

Publicado 2008-12-12 · Atualizado 2021-04-09 · CVE-2008-5529

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA eTrust Antivirus version 31.6.6086

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename extension to have no extension, a .txt extension, or a .jpg extension.

Recommendations For CA eTrust Antivirus version 31.6.6086, consider updating the antivirus signatures to improve malware detection capabilities, and be cautious when opening files with modified extensions from untrusted sources.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5529

Produtos afetados

Ca Etrust Vet Antivirus

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-5529 · Nota de Segurança
• https://t.me/cvenotify/12999 · Publicação no Telegram
• http://securityfocus.com/archive/1/499043/100/0/threaded · Nota
• http://securityreason.com/securityalert/4723 · Nota
• http://securityfocus.com/archive/1/498995/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Nota