deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-4837
Published: 2008-12-10
Description: Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Microsoft Works 8 allow remote attackers to execute arbitrary code via a crafted Word document that contains a malformed table property, which triggers memory corruption, aka "Word Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/499064/100/0/threaded; http://www.securitytracker.com/id?1021370; http://www.us-cert.gov/cas/techalerts/TA08-344A.html
CVE: CVE-2008-4841
Published: 2008-12-10
Description: The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008.  NOTE: As of 20081210, it is unclear whether this vulnerability is related to a WordPad issue disclosed on 20080925 with a 2008-crash.doc.rar example, but there are insufficient details to be sure.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://milw0rm.com/sploits/2008-crash.doc.rar; http://secunia.com/advisories/32997; http://securityreason.com/securityalert/4711
CVE: CVE-2008-5416
Published: 2008-12-10
Description: Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability."
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0304.html; http://osvdb.org/50917; http://secunia.com/advisories/33034
CVE: CVE-2008-5417
Published: 2008-12-10
Description: HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the (1) SYS$CRELNM and (2) SYS$DELLNM system services.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.3/AXP_DNVOSIECO03-V83.txt; http://secunia.com/advisories/33028; http://securitytracker.com/id?1021364
CVE: CVE-2008-5418
Published: 2008-12-10
Description: Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/4707; http://www.securityfocus.com/bid/32380; https://exchange.xforce.ibmcloud.com/vulnerabilities/46774
CVE: CVE-2008-5419
Published: 2008-12-10
Description: Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/50031; http://secunia.com/advisories/32801; http://securityreason.com/securityalert/4710
CVE: CVE-2008-5420
Published: 2008-12-10
Description: The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate SST_SENDFILE requests, which allows remote attackers to read arbitrary files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://osvdb.org/50032; http://secunia.com/advisories/32801; http://securityreason.com/securityalert/4709
CVE: CVE-2006-7235
Published: 2008-12-11
Description: Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1) multiple STOR (aka PUT) commands, or an MKD command followed by (2) a '*' argument, (3) a '|' argument, (4) spaces, or (5) a long string.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/22553; http://www.securityfocus.com/bid/21085; http://www.vupen.com/english/advisories/2006/4520
CVE: CVE-2008-4418
Published: 2008-12-11
Description: Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4601&w=2; http://osvdb.org/50679; http://securityreason.com/securityalert/4705
CVE: CVE-2008-4844
Published: 2008-12-11
Description: Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx; http://code.google.com/p/inception-h2hc/; http://isc.sans.org/diary.html?storyid=5458
CVE: CVE-2008-5415
Published: 2008-12-11
Description: The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.
CVSS Score: 10.0 (HIGH)
References: http://community.ca.com/blogs/casecurityresponseblog/archive/2008/12/10.aspx; http://osvdb.org/50683; http://secunia.com/advisories/27299
CVE: CVE-2008-5421
Published: 2008-12-11
Description: The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://aluigi.altervista.org/adv/smsgheit-adv.txt; http://secunia.com/advisories/29149; http://www.securityfocus.com/bid/28048
CVE: CVE-2008-5422
Published: 2008-12-11
Description: Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/33108; http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1; http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
CVE: CVE-2008-5423
Published: 2008-12-11
Description: Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/33108; http://secunia.com/advisories/33119; http://securitytracker.com/id?1021379
CVE: CVE-2008-5424
Published: 2008-12-11
Description: The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (infinite loop) via a large e-mail message, a related issue to CVE-2006-1173.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro; http://securityreason.com/securityalert/4721; http://www.securityfocus.com/archive/1/499038/100/0/threaded
CVE: CVE-2008-5425
Published: 2008-12-11
Description: ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro; http://securityreason.com/securityalert/4721; http://www.securityfocus.com/archive/1/499038/100/0/threaded
CVE: CVE-2008-5426
Published: 2008-12-11
Description: Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro; http://securityreason.com/securityalert/4721; http://www.securityfocus.com/archive/1/499038/100/0/threaded
CVE: CVE-2008-5427
Published: 2008-12-11
Description: Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro; http://securityreason.com/securityalert/4721; http://www.securityfocus.com/archive/1/499038/100/0/threaded
CVE: CVE-2008-5428
Published: 2008-12-11
Description: Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro; http://securityreason.com/securityalert/4721; http://www.securityfocus.com/archive/1/499038/100/0/threaded
CVE: CVE-2008-5429
Published: 2008-12-11
Description: Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro; http://securityreason.com/securityalert/4721; http://www.securityfocus.com/archive/1/499038/100/0/threaded
CVE: CVE-2008-5431
Published: 2008-12-11
Description: Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via (1) a certain CWD command, (2) a long LIST command, or (3) a certain PORT command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/22553; http://securityreason.com/securityalert/4722; http://www.securityfocus.com/archive/1/488142/100/200/threaded
CVE: CVE-2008-5432
Published: 2008-12-11
Description: Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://moodle.org/mod/forum/discuss.php?d=108590; http://secunia.com/advisories/33079
CVE: CVE-2008-5433
Published: 2008-12-11
Description: Cross-site scripting (XSS) vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://punbb.informer.com/; http://punbb.informer.com/forums/topic/20475/punbb-132/; http://punbb.informer.com/wiki/punbb13/bugs#possible_xss_in_login
CVE: CVE-2008-5434
Published: 2008-12-11
Description: Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) order_by or (2) direction parameter to admin/users.php, or (3) configuration options to admin/settings.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://punbb.informer.com/; http://punbb.informer.com/forums/topic/20475/punbb-132/; http://punbb.informer.com/wiki/punbb13/bugs#potential_sql-injections_at_adminusers.php_page
CVE: CVE-2008-5435
Published: 2008-12-11
Description: Cross-site scripting (XSS) vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/50680; http://punbb.informer.com/; http://www.openwall.com/lists/oss-security/2008/12/09/3
CVE: CVE-2008-5486
Published: 2008-12-12
Description: SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32732; http://securityreason.com/securityalert/4719; http://www.securityfocus.com/bid/32308
CVE: CVE-2008-5487
Published: 2008-12-12
Description: Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/32732; http://securityreason.com/securityalert/4719; http://www.securityfocus.com/bid/32308
CVE: CVE-2008-5488
Published: 2008-12-12
Description: SQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL commands via the passfromform parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/32170; http://www.vupen.com/english/advisories/2008/3048; https://exchange.xforce.ibmcloud.com/vulnerabilities/46435
CVE: CVE-2008-5489
Published: 2008-12-12
Description: SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQL commands via the chid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32723; http://securityreason.com/securityalert/4713; http://www.securityfocus.com/bid/32311
CVE: CVE-2008-5490
Published: 2008-12-12
Description: SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32717; http://securityreason.com/securityalert/4718; http://www.securityfocus.com/bid/32316
CVE: CVE-2008-5491
Published: 2008-12-12
Description: SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4717; http://www.securityfocus.com/bid/32300; https://exchange.xforce.ibmcloud.com/vulnerabilities/46633
CVE: CVE-2008-5492
Published: 2008-12-12
Description: Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/32725; http://securityreason.com/securityalert/4715; http://www.bmgsec.com.au/advisories/openpdf.txt
CVE: CVE-2008-5493
Published: 2008-12-12
Description: SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstorm.linuxsecurity.com/0811-exploits/wholesale-sql.txt; http://secunia.com/advisories/32741; http://securityreason.com/securityalert/4720
CVE: CVE-2008-5494
Published: 2008-12-12
Description: SQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4712; http://www.securityfocus.com/bid/32260; http://www.vupen.com/english/advisories/2008/3122
CVE: CVE-2008-5495
Published: 2008-12-12
Description: Unspecified vulnerability in the GungHo LoadPrgAx ActiveX control 1.0.0.6 and earlier allows remote attackers to execute arbitrary Java applications via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://gungho.jp/; http://jvn.jp/en/jp/JVN47875752/index.html; http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000077.html
CVE: CVE-2008-5496
Published: 2008-12-12
Description: SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/49822; http://secunia.com/advisories/32647; http://securityreason.com/securityalert/4714
CVE: CVE-2008-5497
Published: 2008-12-12
Description: BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://securityreason.com/securityalert/4716; http://www.securityfocus.com/bid/32295; https://exchange.xforce.ibmcloud.com/vulnerabilities/46601
CVE: CVE-2008-5520
Published: 2008-12-12
Description: AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded
CVE: CVE-2008-5521
Published: 2008-12-12
Description: Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded
CVE: CVE-2008-5522
Published: 2008-12-12
Description: AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded
CVE: CVE-2008-5523
Published: 2008-12-12
Description: avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded
CVE: CVE-2008-5524
Published: 2008-12-12
Description: CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded
CVE: CVE-2008-5525
Published: 2008-12-12
Description: ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded
CVE: CVE-2008-5526
Published: 2008-12-12
Description: DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded
CVE: CVE-2008-5527
Published: 2008-12-12
Description: ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4723; http://www.securityfocus.com/archive/1/498995/100/0/threaded; http://www.securityfocus.com/archive/1/499043/100/0/threaded