CVE-2008-5520

CVE-2008-5520 affects AhnLab V3 (2008.12.4.1 and possibly 2008.9.13.0) with Internet Explorer 6/7, enabling remote bypass of malware detection in HTML documents by prepending an MZ header (EXE info) and renaming the payload to have no extension, .txt, or .jpg extensions. The connected documents c...

CVE-2008-5534

CVE-2008-5534 is a vulnerability in certain antivirus products (e.g., ESET NOD32 3662/3440) where an HTML document can bypass malware detection when opened in IE6/IE7 by prefixing the file with an MZ header (EXE info) and altering the filename to have no extension or a .txt or .jpg extension, as ...

CVE-2008-5547

CVE-2008-5547 concerns HAURI ViRobot 2008.12.4.1499 (and possibly 2008.9.12.1375). When used in Internet Explorer 6 or 7, it can bypass malware detection in an HTML document by placing an MZ header ("EXE info") at the beginning and renaming the file with no extension, .txt, or .jpg. This aligns w...

CVE-2008-5540

Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...

CVE-2008-5535

Norman Antivirus 5.80.02, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5538

CVE-2008-5538 describes a malware-detection bypass when using Internet Explorer 6/7 with Prevx Prevx1 2. An MZ header is prepended to an HTML document and the filename altered (no extension, .txt, or .jpg), enabling bypass of malware detection as demonstrated by CVE-2006-5745. The connected docum...

CVE-2008-5538

Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as demonstrated ...

CVE-2008-5536

Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5539

CVE-2008-5539 describes a bypass of malware detection in RISING Antivirus 21.06.31.00 (and possibly 20.61.42.00) when IE6/IE7 is used, by prepending an MZ header to an HTML document and renaming the file with no extension, .txt, or .jpg, as demonstrated by a CVE-2006-5745 exploit. Connected recor...

CVE-2008-5520

AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a...

CVE-2008-5527

CVE-2008-5527 describes a malware-detection bypass in HTML documents when viewed with Internet Explorer 6/7, by prepending an MZ header (EXE info) and altering the filename to have no extension, .txt, or .jpg. The vulnerability is demonstrated via CVE-2006-5745 exploits. The connected records ind...

CVE-2008-5529

CVE-2008-5529 involves CA eTrust Antivirus 31.6.6086 on systems using Internet Explorer 6/7, where a crafted HTML document can bypass malware detection by placing an MZ header at the start and renaming the file to have no extension, .txt, or .jpg, as demonstrated by a CVE-2006-5745 exploit. The c...

CVE-2008-5536

CVE-2008-5536 describes a bypass of malware detection for certain antivirus products when IE 6/7 is used. The vulnerability arises from placing an MZ header at the start of an HTML document and renaming the document (no extension, .txt, or .jpg), leveraging a technique demonstrated by CVE-2006-57...

CVE-2008-5532

Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt...

CVE-2008-5545

Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension...

CVE-2008-5537

PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5541

Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5522

Summary of CVE-2008-5522 : Affected products include AVG Anti-Virus 8.0.0.161 and related antivirus tools (e.g., NVD entries for RISING, Sophos, Symantec, Webwasher, Prevx, PC Tools, VIPRE) that, when Internet Explorer 6 or 7 is used, may bypass malware detection in HTML documents by embedding an...

CVE-2008-5526

DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, a...

CVE-2008-5542

Sunbelt VIPRE 3.1.1832.2 and possibly 3.1.1633.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 ...