CVE-2008-5543

Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5543

CVE-2008-5543 affects Symantec AntiVirus 10 when Internet Explorer 6/7 is used, enabling attackers to bypass malware-detection in HTML by prepending an MZ header (EXE info) and disguising the filename with no extension, .txt, or .jpg. The vulnerability mirrors a broader family seen in related CVE...

CVE-2008-5543: Improper Input Validation

Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...