Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5545
HistoryDec 12, 2008 - 6:30 p.m.

CVE-2008-5545

2008-12-1218:30:03
CWE-20
[email protected]
web.nvd.nist.gov
20
trend micro
vsapi
malware detection
html
remote attackers
cve-2008-5545
exploit

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.971

Percentile

99.8%

JSON

Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka “EXE info”) at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

Affected configurations

NVD
Node
trend_microtrend_micro_antivirusMatch8.700.0.1004
AND
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch7
VendorProductVersionCPE
trend_microtrend_micro_antivirus8.700.0.1004cpe:/a:trend_micro:trend_micro_antivirus:8.700.0.1004:::

Related

nvd 30
cvelist 30
prion 29
saint 4
checkpoint_advisories 3
nessus 1
canvas 1
securityvulns 1
cert 1
packetstorm 1
cve 29
ubuntucve 1
debiancve 1
nvd
nvd
CVE-2008-5545
2008-12-12 18:30:03
CVE-2006-5745
2006-11-06 18:07:00
CVE-2008-5528
2008-12-12 18:30:02
cvelist
cvelist
CVE-2008-5545
2008-12-12 18:13:00
CVE-2008-5528
2008-12-12 18:13:00
CVE-2008-5522
2008-12-12 18:13:00
prion
prion
Design/Logic Flaw
2008-12-12 18:30:00
Design/Logic Flaw
2008-12-12 18:30:00
Design/Logic Flaw
2008-12-12 18:30:00
saint
saint
Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability
2006-11-17 00:00:00
Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability
2006-11-17 00:00:00
Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability
2006-11-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft XMLHTTP Control Open Method Code Execution (MS06-071; CVE-2006-5745)
2006-11-16 00:00:00
Microsoft Internet Explorer XML Core Services Memory Corruption - Ver2 (CVE-2006-5745)
2014-03-03 00:00:00
Preemptive Protection against Microsoft XML Remote Code Execution Vulnerability (MS06-071)
2006-11-14 00:00:00
nessus
nessus
MS06-071: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (928088)
2006-11-14 00:00:00
canvas
canvas
Immunity Canvas: MS06_071
2006-11-06 18:07:00
securityvulns
securityvulns
Microsoft Security Bulletin MS06-071 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (928088)
2006-11-14 00:00:00
cert
cert
Microsoft XML Core Services XMLHTTP ActiveX control vulnerability
2006-11-05 00:00:00
packetstorm
packetstorm
Internet Explorer XML Core Services HTTP Request Handling
2009-11-26 00:00:00
cve
cve
CVE-2008-5521
2008-12-12 18:30:02
CVE-2008-5530
2008-12-12 18:30:02
CVE-2008-5531
2008-12-12 18:30:02
ubuntucve
ubuntucve
CVE-2008-5525
2008-12-12 00:00:00
debiancve
debiancve
CVE-2008-5525
2008-12-12 18:30:02

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.971

Percentile

99.8%

JSON
Related for CVE-2008-5545
nvd30cvelist30prion29saint4checkpoint_advisories3nessus1canvas1securityvulns1cert1packetstorm1cve29ubuntucve1debiancve1