PT-2008-6607 · Microsoft+1 · Internet Explorer+1

Publicado 2008-12-12 · Atualizado 2018-10-11 · CVE-2008-5546

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VirusBlokAda VBA32 version 3.12.8.5

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename extension to have no extension, a .txt extension, or a .jpg extension.

Recommendations For VirusBlokAda VBA32 version 3.12.8.5, consider updating the software to a version that properly detects malware in HTML documents with modified filename extensions. As a temporary workaround, restrict the handling of files with no extension, .txt extension, or .jpg extension in Internet Explorer 6 or 7 to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5546

Produtos afetados

Internet Explorer

Vba32

Referências · 5

• http://securityfocus.com/archive/1/499043/100/0/threaded · Nota
• http://securityreason.com/securityalert/4723 · Nota
• http://securityfocus.com/archive/1/498995/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5546 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Nota