First published: Fri Dec 12 2008(Updated: )
PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PC Tools AntiVirus | =4.4.2.0 | |
Internet Explorer | =6 | |
Internet Explorer | =7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-5537 is considered a high severity vulnerability due to its potential to allow malware to bypass detection.
To fix CVE-2008-5537, users should upgrade to a later version of PC Tools AntiVirus that addresses this vulnerability.
CVE-2008-5537 affects PC Tools AntiVirus version 4.4.2.0 when used with Internet Explorer versions 6 and 7.
Yes, CVE-2008-5537 can be exploited remotely by attackers to bypass antivirus detection.
Files exploiting CVE-2008-5537 may have no extension, a .txt extension, or a .jpg extension while containing malicious content.