CVE-2008-5536

CVE-2008-5536 describes a bypass of malware detection for certain antivirus products when IE 6/7 is used. The vulnerability arises from placing an MZ header at the start of an HTML document and renaming the document (no extension, .txt, or .jpg), leveraging a technique demonstrated by CVE-2006-57...

CVE-2008-5536

Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...