PT-2008-6603 · Sunbelt · Sunbelt Vipre

Xhakerman2006 · Publicado 2008-12-12 · Atualizado 2018-10-11 · CVE-2008-5542

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sunbelt VIPRE versions 3.1.1633.1 through 3.1.1832.2

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file header and extension. This can be achieved by placing an MZ header at the beginning of the file and changing the filename to have no extension, a .txt extension, or a .jpg extension. This technique can be used to bypass detection of exploits, such as the one demonstrated for a specific vulnerability.

Recommendations For Sunbelt VIPRE version 3.1.1633.1, update to a version that is not affected by this issue. For Sunbelt VIPRE version 3.1.1832.2, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the processing of files with modified headers and extensions to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5542

Produtos afetados

Sunbelt Vipre

Referências · 5

• http://securityfocus.com/archive/1/499043/100/0/threaded · Nota
• http://securityreason.com/securityalert/4723 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5542 · Nota de Segurança
• http://securityfocus.com/archive/1/498995/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Nota