Improper input validation in Microsoft Internet_explorer
CVE-2008-5535
Norman Antivirus 5.80.02, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) n…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.030 (85.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 6, 7
- Norman Norman_antivirus_\&_antispyware — versions 5.80.02
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)