CVE-2008-5546

CVE-2008-5546 describes malware-detection bypass in HTML documents when using IE6/IE7, demonstrated by embedding an MZ header at the start and renaming the file (no extension, .txt, or .jpg). Connected records show this technique affects multiple products (e.g., VirusBlokAda VBA32 3.12.8.5, RISIN...

CVE-2008-5522

Summary of CVE-2008-5522 : Affected products include AVG Anti-Virus 8.0.0.161 and related antivirus tools (e.g., NVD entries for RISING, Sophos, Symantec, Webwasher, Prevx, PC Tools, VIPRE) that, when Internet Explorer 6 or 7 is used, may bypass malware detection in HTML documents by embedding an...

CVE-2008-5525

Technical details about CVE-2008-5525 are not publicly provided in the supplied documents; monitoring for updates is advised.

CVE-2008-5535

CVE-2008-5535 concerns Norman Antivirus 5.80.02. When used with Internet Explorer 6 or 7, remote attackers can bypass malware detection in HTML documents by inserting an MZ header at the start and renaming the file with no extension, ".txt", or ".jpg" endings, as demonstrated by a document contai...

CVE-2008-5543

CVE-2008-5543 affects Symantec AntiVirus 10 when Internet Explorer 6/7 is used, enabling attackers to bypass malware-detection in HTML by prepending an MZ header (EXE info) and disguising the filename with no extension, .txt, or .jpg. The vulnerability mirrors a broader family seen in related CVE...

CVE-2008-5532

CVE-2008-5532 documents a bypass of malware detection in HTML carried out by Ikarus Virus Utilities (T3.1.1.45.0 and possibly T3.1.1.34.0) when used with Internet Explorer 6 or 7. The vulnerability stems from an attacker placing an MZ header (the “EXE info”) at the beginning of a document and ren...

The remote host is infected by a virus

This script checks for the presence of different virii on the remote host, by using the SMB credentials you provide the scanner with. SPDX-FileCopyrightText: 2008 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

VBA32 Personal Antivirus 3.12.8.x (malformed archive) DoS Exploit

Exploit for unknown platform in category dos / poc ================================================================= VBA32 Personal Antivirus 3.12.8.x malformed archive DoS Exploit =================================================================...

MS Executable Detection

This service is unknown to Nessus. It appears to send a Microsoft Windows executable when a connection to it is established. This may be evidence of some malware that are known to propagate in this manner. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid33950;...

Teach you clever with a text editor find system vulnerabilities-vulnerability warning-the black bar safety net

Although Kaspersky, rising and other security software can help us to find the vulnerabilities, but today the editor to introduce a method to find loopholes in the new method: use a hexadecimal editor to find the vulnerability. A hex Editor can be used to check and repair various files, recover...

CVE-2008-0910

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted RAR archive. NOTE: this might be related to CVE-2008-0792...

CVE-2008-0910

CVE-2008-0910 is connected to F-Secure antivirus products (Internet Security 2006–2008, Anti-Virus 2006–2008, F-Secure Protection Service, and related products). The related entries in CVE-2008-0792 describe a vulnerability where remote attackers can bypass malware detection by presenting a craft...

CVE-2008-0792

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive...

CVE-2008-0792

CVE-2008-0792 affects multiple F-Secure antivirus products (Internet Security 2006–2008, Anti-Virus 2006–2008, F-Secure Protection Service, and others). The vulnerability allows remote attackers to bypass malware detection by presenting a crafted CAB archive. The documents do not provide exploit ...

CVE-2007-4785

Sony Micro Vault Fingerprint Access Software, as distributed with Sony Micro Vault USM-F USB flash drives, installs a driver that hides a directory under %WINDIR%, which might allow remote attackers to bypass malware detection by placing files in this directory...

Design/Logic Flaw

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed 1 CAB, 2 LZH, and 3 RAR files with modified headers, which might allow remote attackers to bypass malware detection...

CVE-2007-4787

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed 1 CAB, 2 LZH, and 3 RAR files with modified headers, which might allow remote attackers to bypass malware detection...

Directory traversal

Sony Micro Vault Fingerprint Access Software, as distributed with Sony Micro Vault USM-F USB flash drives, installs a driver that hides a directory under %WINDIR%, which might allow remote attackers to bypass malware detection by placing files in this directory...

CVE-2007-4785

Sony Micro Vault Fingerprint Access Software, as distributed with Sony Micro Vault USM-F USB flash drives, installs a driver that hides a directory under %WINDIR%, which might allow remote attackers to bypass malware detection by placing files in this directory...

CVE-2007-4787

CVE-2007-4787 affects Sophos Anti-Virus (prior to 2.49.0) where the virus detection engine fails to properly process malformed CAB, LZH, and RAR archives with modified headers, potentially allowing remote attackers to bypass malware detection. The vulnerability resides in the archive-processing l...