PT-2008-6609 · Microsoft+1 · Internet Explorer+1

Xhakerman2006 · Published 2008-12-12 · Updated 2018-10-11 · CVE-2008-5548

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VirusBuster version 4.5.11.0

Description The issue allows remote attackers to bypass malware detection in HTML documents by modifying the file to include an MZ header at the beginning and altering the filename to have no extension, a .txt extension, or a .jpg extension. This can be exploited when Internet Explorer 6 or 7 is used.

Recommendations For VirusBuster version 4.5.11.0, consider updating the software to a version that includes a fix for this issue, as the current version allows malware to bypass detection under specific conditions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-5548

Affected Products

Internet Explorer

Virusbuster

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5548 · Security Note
• http://securityfocus.com/archive/1/499043/100/0/threaded · Note
• http://securityreason.com/securityalert/4723 · Note
• http://securityfocus.com/archive/1/498995/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47435 · Note