CVE-2008-5520
published 2008-12-12CVE-2008-5520: AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML…
PriorityP434critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
1.91%
77.2th percentile
AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ahnlab | v3_internet_security | — | — |
| ahnlab | v3_internet_security | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://securityreason.com/securityalert/4723http://www.securityfocus.com/archive/1/498995/100/0/threadedhttp://www.securityfocus.com/archive/1/499043/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/47435http://securityreason.com/securityalert/4723http://www.securityfocus.com/archive/1/498995/100/0/threadedhttp://www.securityfocus.com/archive/1/499043/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/47435
2008-12-12
Published