PT-2008-6600 · Microsoft+1 · Internet Explorer+1

Xhakerman2006 · Publicado 2008-12-12 · Atualizado 2018-10-11 · CVE-2008-5539

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RISING Antivirus versions 20.61.42.00 through 21.06.31.00

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename to have no extension, a .txt extension, or a .jpg extension. This can be exploited when using Internet Explorer 6 or 7.

Recommendations For RISING Antivirus version 20.61.42.00, update to a version later than 21.06.31.00 to ensure the issue is resolved. For RISING Antivirus version 21.06.31.00, consider avoiding the use of Internet Explorer 6 or 7 until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5539

Produtos afetados

Internet Explorer

Rising Antivirus

Referências · 5

• http://securityfocus.com/archive/1/499043/100/0/threaded · Nota
• http://securityreason.com/securityalert/4723 · Nota
• http://securityfocus.com/archive/1/498995/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5539 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Nota