CVE-2008-5537: Input Validation
PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5537?
CVE-2008-5537 is considered a high severity vulnerability due to its potential to allow malware to bypass detection.
How do I fix CVE-2008-5537?
To fix CVE-2008-5537, users should upgrade to a later version of PC Tools AntiVirus that addresses this vulnerability.
What software is affected by CVE-2008-5537?
CVE-2008-5537 affects PC Tools AntiVirus version 4.4.2.0 when used with Internet Explorer versions 6 and 7.
Can CVE-2008-5537 be exploited remotely?
Yes, CVE-2008-5537 can be exploited remotely by attackers to bypass antivirus detection.
What types of files can exploit CVE-2008-5537?
Files exploiting CVE-2008-5537 may have no extension, a .txt extension, or a .jpg extension while containing malicious content.