CVE-2008-5523

avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5523

CVE-2008-5523 describes multiple antivirus products (e.g., Avast!, NVD-listed vendors, RISING, Sophos, Symantec, Sunbelt VIPRE, PrevX/Prevx1, PC Tools) failing to detect malware when an HTML document begins with an MZ header (EXE info) and a manipulated filename (no extension, .txt, or .jpg). The...