PT-2008-6609 · Microsoft+1 · Internet Explorer+1

Xhakerman2006 · Publicado 2008-12-12 · Atualizado 2018-10-11 · CVE-2008-5548

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VirusBuster version 4.5.11.0

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename to have no extension, a .txt extension, or a .jpg extension. This can be exploited when Internet Explorer 6 or 7 is used.

Recommendations For VirusBuster version 4.5.11.0, consider updating the software to a version that includes a fix for this issue, as the current version allows malware to bypass detection under specific conditions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5548

Produtos afetados

Internet Explorer

Virusbuster

Referências · 5

• http://securityfocus.com/archive/1/499043/100/0/threaded · Nota
• http://securityreason.com/securityalert/4723 · Nota
• http://securityfocus.com/archive/1/498995/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5548 · Nota de Segurança