CVE-2008-5522: Input Validation
AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5522?
CVE-2008-5522 is considered a medium severity vulnerability as it allows remote attackers to bypass malware detection.
How do I fix CVE-2008-5522?
To mitigate CVE-2008-5522, upgrade AVG Anti-Virus to a version that addresses this vulnerability.
Which versions of AVG Anti-Virus are affected by CVE-2008-5522?
AVG Anti-Virus version 8.0.0.161 is specifically affected by CVE-2008-5522.
Can CVE-2008-5522 be exploited in Internet Explorer?
Yes, CVE-2008-5522 can be exploited when using Internet Explorer 6 or 7.
What types of file extensions are involved in CVE-2008-5522?
CVE-2008-5522 involves file extensions such as no extension, .txt, and .jpg, which can be modified for exploitation.