NVD

Id
5269  
Name
CVE-2008-5520  
Description
AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-12  
Modified Date
2009-01-29  
Seq
2008-5520  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33296 5269 CVE-2008-5520 4723  View
33297 5269 CVE-2008-5520 20081208 Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass  View
33298 5269 CVE-2008-5520 20081209 Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass -Update-  View
33299 5269 CVE-2008-5520 multiple-antivirus-mzheader-code-execution(47435)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48407 JVNDB-2008-003717 AhnLab V3 における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 AhnLab V3 には、Internet Explorer 6 または 7 が使用されている際、HTML ドキュメント内のマルウェアの検出を回避される脆弱性が存在します。 CVE-2008-5520 35633 CVE-2008-5520 5269 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003717.html 2008-12-12 2012-06-26 View