NVD

Id
5289  
Name
CVE-2008-5540  
Description
Secure Computing Secure Web Gateway (aka Webwasher), when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-12  
Modified Date
2009-01-29  
Seq
2008-5540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33376 5289 CVE-2008-5540 4723  View
33377 5289 CVE-2008-5540 20081208 Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass  View
33378 5289 CVE-2008-5540 20081209 Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass -Update-  View
33379 5289 CVE-2008-5540 multiple-antivirus-mzheader-code-execution(47435)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51234 JVNDB-2008-006544 Secure Computing Secure Web Gateway における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 Secure Computing Secure Web Gateway には、Internet Explorer 6 または 7 が使用されている際、HTML ドキュメント内のマルウェアの検出を回避される脆弱性が存在します。 CVE-2008-5540 35653 CVE-2008-5540 5289 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006544.html 2008-12-12 2012-12-20 View