CVE-2008-5525

2008-12-1218:30:02

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.972

Percentile

99.9%

JSON

ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka “EXE info”) at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

OSVersionArchitecturePackageVersionFilename
Debian12allclamav< 1.0.5+dfsg-1~deb12u1clamav_1.0.5+dfsg-1~deb12u1_all.deb
Debian11allclamav< 0.103.10+dfsg-0+deb11u1clamav_0.103.10+dfsg-0+deb11u1_all.deb
Debian999allclamav< 1.3.1+dfsg-5clamav_1.3.1+dfsg-5_all.deb
Debian13allclamav< 1.3.1+dfsg-5clamav_1.3.1+dfsg-5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	clamav	< 1.0.5+dfsg-1~deb12u1	clamav_1.0.5+dfsg-1~deb12u1_all.deb
Debian	11	all	clamav	< 0.103.10+dfsg-0+deb11u1	clamav_0.103.10+dfsg-0+deb11u1_all.deb
Debian	999	all	clamav	< 1.3.1+dfsg-5	clamav_1.3.1+dfsg-5_all.deb
Debian	13	all	clamav	< 1.3.1+dfsg-5	clamav_1.3.1+dfsg-5_all.deb