Unscored severity · published Dec 12, 2008
CVE-2008-5522
AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE…
–
CVSS
2.9%
EPSS
No
On KEV
Description
AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · Avg
8.0.0.161 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5522
securityreason.com
http://securityreason.com/securityalert/4723
www.securityfocus.com
http://www.securityfocus.com/archive/1/498995/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/499043/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47435
More from Antivirus
7.8
CVE-2024-7237
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
7.8
CVE-2024-7234
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
7.8
CVE-2022-4294
Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to…
5.5
CVE-2024-7236
AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability
5.5
CVE-2024-7235
AVG AntiVirus Free Link Following Denial-of-Service Vulnerability