PT-2008-6583 · Microsoft+1 · Internet Explorer+1

Xhakerman2006 · Published 2008-12-12 · Updated 2018-10-11 · CVE-2008-5522

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus version 8.0.0.161

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename extension to have no extension, a .txt extension, or a .jpg extension. This can be exploited when using Internet Explorer 6 or 7.

Recommendations For AVG Anti-Virus version 8.0.0.161, consider updating the software to a version that includes a fix for this issue, as using outdated versions may leave systems vulnerable to malware bypass attacks.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5522

Affected Products

Avg Anti-Virus

Internet Explorer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5522 · Security Note
• http://securityfocus.com/archive/1/499043/100/0/threaded · Note
• http://securityreason.com/securityalert/4723 · Note
• http://securityfocus.com/archive/1/498995/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Note