Login Request a demo
Unscored severity · published Dec 12, 2008
CVE-2008-5523
avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE…
–
CVSS
2.9%
EPSS
No
On KEV
Description
avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Avast Antivirus · Avast
4.8.1281.0 · source: NVD
Affected product
AA
Avast Antivirus
Avast
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5523
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5523
securityreason.com
http://securityreason.com/securityalert/4723
www.securityfocus.com
http://www.securityfocus.com/archive/1/498995/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/499043/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47435
More from Avast Antivirus
7.8
CVE-2025-71326
AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation
–
CVE-2015-5662
Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive
–
CVE-2008-6846
Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (application crash) or execute…
–
CVE-2007-2846
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS…
–
CVE-2007-2845
Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB…