CVE-2008-5530: Input Validation
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5530?
CVE-2008-5530 has been rated as a medium severity vulnerability due to its ability to bypass malware detection.
How do I fix CVE-2008-5530?
To fix CVE-2008-5530, users should update Ewido Security Suite to a later version that addresses this vulnerability.
Which software is affected by CVE-2008-5530?
CVE-2008-5530 specifically affects Ewido Security Suite version 4.0 when used with Internet Explorer versions 6 and 7.
Can CVE-2008-5530 be exploited remotely?
Yes, CVE-2008-5530 can be exploited remotely by attackers through specially crafted HTML documents.
What is the impact of exploiting CVE-2008-5530?
Exploitation of CVE-2008-5530 may result in undetected malware execution on the target system.