PT-2008-6608 · Microsoft+1 · Internet Explorer+1

Published 2008-12-12 · Updated 2018-10-11 · CVE-2008-5547

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HAURI ViRobot version 2008.12.4.1499 HAURI ViRobot version 2008.9.12.1375

Description The issue allows remote attackers to bypass detection of malware in an HTML document. This can be achieved by placing an MZ header at the beginning of the document and modifying the filename to have no extension, a .txt extension, or a .jpg extension.

Recommendations For HAURI ViRobot version 2008.12.4.1499, update the software to a version that includes improved malware detection capabilities. For HAURI ViRobot version 2008.9.12.1375, update the software to a version that includes improved malware detection capabilities. As a temporary workaround, consider restricting the use of Internet Explorer 6 or 7 with HAURI ViRobot until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5547

Affected Products

Hauri Virobot

Internet Explorer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5547 · Security Note
• http://securityfocus.com/archive/1/499043/100/0/threaded · Note
• http://securityreason.com/securityalert/4723 · Note
• http://securityfocus.com/archive/1/498995/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Note