Improper input validation in Microsoft Internet_explorer
CVE-2008-5541
Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) n…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.076 (93.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 6, 7
- Sophos Anti-virus — versions 4.33.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)