CVE-2008-5530: Input Validation
First published: Fri Dec 12 2008(Updated: )
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ewido Security Suite | =4.0 | |
| Ewido Security Suite | =4.0 | |
| Internet Explorer | =6 | |
| Internet Explorer | =7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2008-5530?
CVE-2008-5530 has been rated as a medium severity vulnerability due to its ability to bypass malware detection.
How do I fix CVE-2008-5530?
To fix CVE-2008-5530, users should update Ewido Security Suite to a later version that addresses this vulnerability.
Which software is affected by CVE-2008-5530?
CVE-2008-5530 specifically affects Ewido Security Suite version 4.0 when used with Internet Explorer versions 6 and 7.
Can CVE-2008-5530 be exploited remotely?
Yes, CVE-2008-5530 can be exploited remotely by attackers through specially crafted HTML documents.
What is the impact of exploiting CVE-2008-5530?
Exploitation of CVE-2008-5530 may result in undetected malware execution on the target system.
- collector/nvd-historical
- agent/type
- agent/event
- agent/references
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/softwarecombine
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/avg
- canonical/ewido security suite
- version/ewido security suite/4.0
- vendor/ewido
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/6
- version/internet explorer/7