RSS   Vulnerabilities for 'Ewido security suite'   RSS

2008-12-12
 
CVE-2008-5530

CWE-20
 

 
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

 

 >>> Vendor: AVG 12 Products
Antivirus
Avg antivirus
Anti-virus
Antivirus plus firewall
Internet security
Ewido security suite
Avg anti-virus
Safeguard
Secure search toolbar
Protection
Ultimate
Secure browser


Copyright 2024, cxsecurity.com

 

Back to Top