PT-2008-6607 · Microsoft+1 · Internet Explorer+1

Published 2008-12-12 · Updated 2018-10-11 · CVE-2008-5546

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VirusBlokAda VBA32 version 3.12.8.5

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename extension to have no extension, a .txt extension, or a .jpg extension.

Recommendations For VirusBlokAda VBA32 version 3.12.8.5, consider updating the software to a version that properly detects malware in HTML documents with modified filename extensions. As a temporary workaround, restrict the handling of files with no extension, .txt extension, or .jpg extension in Internet Explorer 6 or 7 to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5546

Affected Products

Internet Explorer

Vba32

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5546 · Security Note
• http://securityfocus.com/archive/1/499043/100/0/threaded · Note
• http://securityreason.com/securityalert/4723 · Note
• http://securityfocus.com/archive/1/498995/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Note