CVE-2008-5528: Input Validation
Aladdin eSafe 7.0.17.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5528?
CVE-2008-5528 is classified as a medium severity vulnerability due to its ability to bypass malware detection.
How does CVE-2008-5528 exploit Aladdin eSafe?
CVE-2008-5528 exploits Aladdin eSafe by allowing remote attackers to bypass detection through specific file modifications.
What versions of Aladdin eSafe are affected by CVE-2008-5528?
CVE-2008-5528 specifically affects Aladdin eSafe version 7.0.17.0.
Can CVE-2008-5528 be exploited using commonly used file types?
Yes, CVE-2008-5528 can be exploited by using files with no extension, .txt, or .jpg extensions.
What are the recommended steps to mitigate CVE-2008-5528?
The best mitigation for CVE-2008-5528 is to update to a patched version of the Aladdin eSafe software.