CVE-2008-5545: Input Validation
Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5545?
CVE-2008-5545 is considered a high-severity vulnerability due to its ability to bypass malware detection.
How do I fix CVE-2008-5545?
To mitigate CVE-2008-5545, update Trend Micro AntiVirus to a version that addresses this vulnerability.
What are the affected software versions for CVE-2008-5545?
CVE-2008-5545 specifically affects Trend Micro AntiVirus version 8.700.0.1004.
Can CVE-2008-5545 be exploited through Internet Explorer?
Yes, CVE-2008-5545 can be exploited when using Internet Explorer 6 or 7 to open HTML documents containing malicious content.
Does CVE-2008-5545 affect other software apart from Trend Micro AntiVirus?
CVE-2008-5545 primarily affects Trend Micro AntiVirus and is not directly linked to vulnerabilities in other software.