CVE-2008-5526

EPSS 0.31%
Veröffentlicht 12.12.2008 18:30:02
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Drweb ≫ Anti-virus Version4.44.0.09170

Microsoft ≫ Internet Explorer Version6
Microsoft ≫ Internet Explorer Version7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.31%	0.539

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://securityreason.com/securityalert/4723

http://www.securityfocus.com/archive/1/498995/100/0/threaded

http://www.securityfocus.com/archive/1/499043/100/0/threaded

https://exchange.xforce.ibmcloud.com/vulnerabilities/47435

https://nvd.nist.gov/vuln/detail/CVE-2008-5526

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5526

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5526

EUVD