PT-2008-6590 · Ca · Ca Etrust Vet Antivirus

Published 2008-12-12 · Updated 2021-04-09 · CVE-2008-5529

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA eTrust Antivirus version 31.6.6086

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename extension to have no extension, a .txt extension, or a .jpg extension.

Recommendations For CA eTrust Antivirus version 31.6.6086, consider updating the antivirus signatures to improve malware detection capabilities, and be cautious when opening files with modified extensions from untrusted sources.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5529

Affected Products

Ca Etrust Vet Antivirus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-5529 · Security Note
• https://t.me/cvenotify/12999 · Telegram Post
• http://securityfocus.com/archive/1/499043/100/0/threaded · Note
• http://securityreason.com/securityalert/4723 · Note
• http://securityfocus.com/archive/1/498995/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Note