PT-2008-6604 · Symantec · Symantec Antivirus

Publicado 2008-12-12 · Atualizado 2018-10-11 · CVE-2008-5543

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus (SAV) version 10

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename to have no extension, a .txt extension, or a .jpg extension.

Recommendations For Symantec AntiVirus (SAV) version 10, consider updating the software to a version that includes improved malware detection capabilities to prevent bypassing of malware detection.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5543

Produtos afetados

Symantec Antivirus

Referências · 5

• http://securityfocus.com/archive/1/499043/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5543 · Nota de Segurança
• http://securityreason.com/securityalert/4723 · Nota
• http://securityfocus.com/archive/1/498995/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Nota