Unscored severity · published Dec 12, 2008
CVE-2008-5527
ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at…
–
CVSS
2.2%
EPSS
No
On KEV
Description
ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Smart Security · Eset
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5527
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5527
securityreason.com
http://securityreason.com/securityalert/4723
www.securityfocus.com
http://www.securityfocus.com/archive/1/498995/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/499043/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47435
More from Smart Security
9.8
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
8.6
CVE-2023-5594
Improper following of a certificate's chain of trust in ESET security products
7.8
CVE-2024-0353
Local privilege escalation in Windows products
7.8
CVE-2023-3160
Local privilege escalation in security products for Windows
7.8
CVE-2021-37851
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher…