Improper input validation in Microsoft Internet_explorer
CVE-2008-5545
Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modif…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.030 (85.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 6, 7
- Trend_micro Trend_micro_antivirus — versions 8.700.0.1004
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)