CVE-2008-5547

CVE-2008-5547 concerns HAURI ViRobot 2008.12.4.1499 (and possibly 2008.9.12.1375). When used in Internet Explorer 6 or 7, it can bypass malware detection in an HTML document by placing an MZ header ("EXE info") at the beginning and renaming the file with no extension, .txt, or .jpg. This aligns w...

CVE-2008-5541

CVE-2008-5541 affects Sophos Anti-Virus 4.33.0 and describes a bypass of malware detection in HTML documents when Internet Explorer 6/7 is used. The underlying issue is an attacker placing an MZ header (the "EXE info") at the beginning of a document and altering the filename to have no extension,...

CVE-2008-5538

CVE-2008-5538 describes a malware-detection bypass when using Internet Explorer 6/7 with Prevx Prevx1 2. An MZ header is prepended to an HTML document and the filename altered (no extension, .txt, or .jpg), enabling bypass of malware detection as demonstrated by CVE-2006-5745. The connected docum...

CVE-2008-5544

Hacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extensio...

CVE-2008-5525

ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extensio...

CVE-2008-5527

ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5531

Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5540

Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...

CVE-2008-5544

The CVE-2008-5544 entry describes a vulnerability in Hacksoft The Hacker 6.3.1.2.174 (and possibly 6.3.0.9.081) where, when using Internet Explorer 6/7, an HTML document can bypass malware detection by inserting an MZ header at the beginning (an “EXE info”) and modifying the filename to have (1) ...

CVE-2008-5521

The CVE-2008-5521 issue affects Avira AntiVir versions 7.9.0.36 and possibly 7.8.1.28. When Internet Explorer 6 or 7 is used, an attacker can bypass malware detection in HTML documents by placing an MZ header (the “EXE info”) at the start and altering the document’s filename to have no extension,...

CVE-2008-5526

The CVE-2008-5526 entry describes a malware-detection bypass in several antivirus products when Internet Explorer 6/7 is used: an MZ header (EXE info) at document start and a filename with no extension, .txt, or .jpg can evade scanning. Affected products in connected data include DrWeb Anti-virus...

CVE-2008-5530

Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5520

CVE-2008-5520 affects AhnLab V3 (2008.12.4.1 and possibly 2008.9.13.0) with Internet Explorer 6/7, enabling remote bypass of malware detection in HTML documents by prepending an MZ header (EXE info) and renaming the payload to have no extension, .txt, or .jpg extensions. The connected documents c...

CVE-2008-5534

CVE-2008-5534 is a vulnerability in certain antivirus products (e.g., ESET NOD32 3662/3440) where an HTML document can bypass malware detection when opened in IE6/IE7 by prefixing the file with an MZ header (EXE info) and altering the filename to have no extension or a .txt or .jpg extension, as ...

CVE-2008-5543

Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5545

Concrete details found: CVE-2008-5545 is linked to a historic bypass of malware detection in HTML documents by inserting an MZ header (EXE info) at the start and renaming to no extension, .txt, or .jpg. Connected entries show affected products across multiple security suites (e.g., Trend Micro VS...

CVE-2008-5524

The CVE-2008-5524 entry describes a bypass of malware detection in HTML documents caused by an MZ header placement and altered file extension/filename (no extension, .txt, or .jpg) when using Internet Explorer 6/7. Affected product in the initial entry is CAT-QuickHeal 10.00 (and possibly 9.50); ...

CVE-2008-5538

Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as demonstrated ...

CVE-2008-5532

Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt...

CVE-2008-5529

CVE-2008-5529 involves CA eTrust Antivirus 31.6.6086 on systems using Internet Explorer 6/7, where a crafted HTML document can bypass malware detection by placing an MZ header at the start and renaming the file to have no extension, .txt, or .jpg, as demonstrated by a CVE-2006-5745 exploit. The c...