CVE-2008-5528

CVE-2008-5528 describes a bypass of malware detection in HTML documents when using Internet Explorer 6/7, by prepending an MZ header (“EXE info”) and renaming the document’s filename to have no extension, .txt, or .jpg. Connected documents (e.g., CVE-2006-5745) confirm the same pattern affecting ...