RSS   Vulnerabilities for 'Ewido security suite'   RSS

2008-12-12
 
CVE-2008-5530

CWE-20
 

 
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

 

 >>> Vendor: AVG 12 Products
Antivirus plus firewall
Antivirus
Ewido security suite
Avg anti-virus
Anti-virus
Internet security
Avg antivirus
Safeguard
Secure search toolbar
Protection
Ultimate
Secure browser


Copyright 2020, cxsecurity.com

 

Back to Top