Unscored severity · published Dec 12, 2008
CVE-2008-5532
Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Ikarus Antivirus · Ikarus
t3.1.1.34.0; t3.1.1.45.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5532
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5532
securityreason.com
http://securityreason.com/securityalert/4723
www.securityfocus.com
http://www.securityfocus.com/archive/1/498995/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/499043/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47435
More from Ikarus Antivirus
–
CVE-2005-3375
Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which…
–
CVE-2005-3228
Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR…