Improper input validation in Avast Avast_antivirus
CVE-2008-5523
avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.029 (85.4th percentile) — read the EPSS interpretation.
Affected products
- Avast Avast_antivirus — versions 4.8.1281.0
- Microsoft Internet_explorer — versions 6, 7
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)