Improper input validation in Microsoft Internet_explorer
CVE-2008-5543
Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.030 (85.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 6, 7
- Symantec Antivirus — versions 10.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)