What is the severity of CVE-2008-5538?

CVE-2008-5538 is considered a medium severity vulnerability due to its ability to allow malware detection bypass.

How does CVE-2008-5538 allow malware detection bypass?

CVE-2008-5538 allows malware detection bypass by using an MZ header in an HTML document and modifying the filename extensions to evade detection.

Which software is affected by CVE-2008-5538?

CVE-2008-5538 specifically affects Prevx Prevx1 version 2 when used with Internet Explorer 6 or 7.

What types of extensions can be used to exploit CVE-2008-5538?

Exploitation of CVE-2008-5538 can occur using files with no extension, a .txt extension, or a .jpg extension.

What actions should users take regarding CVE-2008-5538?

Users should disable or update Prevx Prevx1 and consider using alternative security solutions while accessing untrusted web content.

Vulnerability/
CVE-2008-5538

critical

9.3

CWE

12/12/2008

11/10/2018

CVE-2008-5538: Input Validation

First published: Fri Dec 12 2008(Updated: )

Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Prevx	=2
Internet Explorer	=6
Internet Explorer	=7

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-5538?
CVE-2008-5538 is considered a medium severity vulnerability due to its ability to allow malware detection bypass.
How does CVE-2008-5538 allow malware detection bypass?
CVE-2008-5538 allows malware detection bypass by using an MZ header in an HTML document and modifying the filename extensions to evade detection.
Which software is affected by CVE-2008-5538?
CVE-2008-5538 specifically affects Prevx Prevx1 version 2 when used with Internet Explorer 6 or 7.
What types of extensions can be used to exploit CVE-2008-5538?
Exploitation of CVE-2008-5538 can occur using files with no extension, a .txt extension, or a .jpg extension.
What actions should users take regarding CVE-2008-5538?
Users should disable or update Prevx Prevx1 and consider using alternative security solutions while accessing untrusted web content.

collector/nvd-historical
agent/references
agent/type
agent/event
agent/first-publish-date
agent/last-modified-date
agent/weakness
agent/severity
agent/author
agent/tags
agent/softwarecombine
agent/description
collector/nvd-index
agent/software-canonical-lookup-request
vendor/prevx
canonical/prevx
version/prevx/2
vendor/microsoft
canonical/internet explorer
version/internet explorer/6
version/internet explorer/7

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.