CVE-2008-5525

ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extensio...

CVE-2008-5526

DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, a...

CVE-2008-5524

The CVE-2008-5524 entry describes a bypass of malware detection in HTML documents caused by an MZ header placement and altered file extension/filename (no extension, .txt, or .jpg) when using Internet Explorer 6/7. Affected product in the initial entry is CAT-QuickHeal 10.00 (and possibly 9.50); ...

CVE-2008-5542

CVE-2008-5542 involves Sunbelt VIPRE 3.1.1832.2 (and possibly 3.1.1633.1) where, under Internet Explorer 6/7, an MZ header at document start and filename tricks (no extension, .txt, or .jpg) bypass malware-detection in HTML documents. This mirrors CVE-2006-5745 exploit behavior cited in the descr...

CVE-2008-5545

Concrete details found: CVE-2008-5545 is linked to a historic bypass of malware detection in HTML documents by inserting an MZ header (EXE info) at the start and renaming to no extension, .txt, or .jpg. Connected entries show affected products across multiple security suites (e.g., Trend Micro VS...

CVE-2008-5526

The CVE-2008-5526 entry describes a malware-detection bypass in several antivirus products when Internet Explorer 6/7 is used: an MZ header (EXE info) at document start and a filename with no extension, .txt, or .jpg can evade scanning. Affected products in connected data include DrWeb Anti-virus...

CVE-2008-5544

The CVE-2008-5544 entry describes a vulnerability in Hacksoft The Hacker 6.3.1.2.174 (and possibly 6.3.0.9.081) where, when using Internet Explorer 6/7, an HTML document can bypass malware detection by inserting an MZ header at the beginning (an “EXE info”) and modifying the filename to have (1) ...

CVE-2008-5533

CVE-2008-5533 describes a bypass of malware detection in K7 AntiVirus 7.10.541 (and possibly 7.10.454) when Internet Explorer 6/7 is used, by placing an MZ header at the start of an HTML document and renaming the file with no extension, or .txt, or .jpg. Related documentation for CVE-2006-5745 sh...

CVE-2008-5522

Summary of CVE-2008-5522 : Affected products include AVG Anti-Virus 8.0.0.161 and related antivirus tools (e.g., NVD entries for RISING, Sophos, Symantec, Webwasher, Prevx, PC Tools, VIPRE) that, when Internet Explorer 6 or 7 is used, may bypass malware detection in HTML documents by embedding an...

CVE-2008-5541

CVE-2008-5541 affects Sophos Anti-Virus 4.33.0 and describes a bypass of malware detection in HTML documents when Internet Explorer 6/7 is used. The underlying issue is an attacker placing an MZ header (the "EXE info") at the beginning of a document and altering the filename to have no extension,...

CVE-2008-5537

CVE-2008-5537 affects PC Tools AntiVirus 4.4.2.0 (and related products in the family) when using Internet Explorer 6/7. The vulnerability enables bypass of malware detection in HTML documents by placing an MZ header ("EXE info") at the beginning and renaming the file to have no extension, a .txt ...

CVE-2008-5547

CVE-2008-5547 concerns HAURI ViRobot 2008.12.4.1499 (and possibly 2008.9.12.1375). When used in Internet Explorer 6 or 7, it can bypass malware detection in an HTML document by placing an MZ header ("EXE info") at the beginning and renaming the file with no extension, .txt, or .jpg. This aligns w...

CVE-2008-5528

CVE-2008-5528 describes a bypass of malware detection in HTML documents when using Internet Explorer 6/7, by prepending an MZ header (“EXE info”) and renaming the document’s filename to have no extension, .txt, or .jpg. Connected documents (e.g., CVE-2006-5745) confirm the same pattern affecting ...

CVE-2008-5529

CA eTrust Antivirus 31.6.6086, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, a...

CVE-2008-5530

Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5531

Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5538

CVE-2008-5538 describes a malware-detection bypass when using Internet Explorer 6/7 with Prevx Prevx1 2. An MZ header is prepended to an HTML document and the filename altered (no extension, .txt, or .jpg), enabling bypass of malware detection as demonstrated by CVE-2006-5745. The connected docum...

CVE-2008-5539

CVE-2008-5539 describes a bypass of malware detection in RISING Antivirus 21.06.31.00 (and possibly 20.61.42.00) when IE6/IE7 is used, by prepending an MZ header to an HTML document and renaming the file with no extension, .txt, or .jpg, as demonstrated by a CVE-2006-5745 exploit. Connected recor...

CVE-2008-5543

CVE-2008-5543 affects Symantec AntiVirus 10 when Internet Explorer 6/7 is used, enabling attackers to bypass malware-detection in HTML by prepending an MZ header (EXE info) and disguising the filename with no extension, .txt, or .jpg. The vulnerability mirrors a broader family seen in related CVE...

CVE-2008-5540

Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...