NVD

Id
5294  
Name
CVE-2008-5545  
Description
Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-12  
Modified Date
2009-01-29  
Seq
2008-5545  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33396 5294 CVE-2008-5545 4723  View
33397 5294 CVE-2008-5545 20081208 Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass  View
33398 5294 CVE-2008-5545 20081209 Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass -Update-  View
33399 5294 CVE-2008-5545 multiple-antivirus-mzheader-code-execution(47435)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51238 JVNDB-2008-006548 Trend Micro AntiVirus の Trend Micro VSAPI における HTML 文書内のマルウェアの検出を回避される脆弱性 Trend Micro AntiVirus の Trend Micro VSAPI は、Internet Explorer 6 または 7 が使用されている際、HTML 文書内のマルウェアの検出を回避される脆弱性が存在します。 CVE-2008-5545 35658 CVE-2008-5545 5294 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006548.html 2008-12-12 2012-12-20 View