Unscored severity · published Dec 12, 2008
CVE-2008-5546
VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE…
–
CVSS
1.9%
EPSS
No
On KEV
Description
VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VA
Vba32 Antivirus · Virusblokada
3.12.8.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5546
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5546
securityreason.com
http://securityreason.com/securityalert/4723
www.securityfocus.com
http://www.securityfocus.com/archive/1/498995/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/499043/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/47435
More from Vba32 Antivirus
7.1
CVE-2024-23440
Vba32 Antivirus v3.36.0 - Arbitrary Memory Read
7.1
CVE-2024-23439
Vba32 Antivirus v3.36.0 - Arbitrary Memory Read
5.5
CVE-2024-23441
Vba32 Antivirus v3.36.0 - Denial of Service (DoS)
–
CVE-2007-5254
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application…