PT-2008-6600 · Microsoft+1 · Internet Explorer+1

Xhakerman2006 · Published 2008-12-12 · Updated 2018-10-11 · CVE-2008-5539

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RISING Antivirus versions 20.61.42.00 through 21.06.31.00

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename to have no extension, a .txt extension, or a .jpg extension. This can be exploited when using Internet Explorer 6 or 7.

Recommendations For RISING Antivirus version 20.61.42.00, update to a version later than 21.06.31.00 to ensure the issue is resolved. For RISING Antivirus version 21.06.31.00, consider avoiding the use of Internet Explorer 6 or 7 until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5539

Affected Products

Internet Explorer

Rising Antivirus

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5539 · Security Note
• http://securityfocus.com/archive/1/499043/100/0/threaded · Note
• http://securityreason.com/securityalert/4723 · Note
• http://securityfocus.com/archive/1/498995/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Note