CVE-2008-5533: Input Validation
K7AntiVirus 7.10.541 and possibly 7.10.454, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5533?
CVE-2008-5533 is considered a high severity vulnerability due to its ability to allow remote attackers to bypass malware detection.
How do I fix CVE-2008-5533?
To mitigate CVE-2008-5533, update to a version of K7 Antivirus that is not affected by this vulnerability.
What versions of K7 Antivirus are affected by CVE-2008-5533?
K7 Antivirus versions 7.10.454 and 7.10.541 are specifically affected by CVE-2008-5533.
Which web browsers are involved in CVE-2008-5533?
CVE-2008-5533 affects users when using Internet Explorer versions 6 and 7.
Can CVE-2008-5533 be exploited through email attachments?
Yes, CVE-2008-5533 can be exploited by attackers through specially crafted HTML documents sent as email attachments.