CVE-2008-5547 - CVE House
Back to Database
Status published Critical CVE-2008-5547

HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6...

Vulnerability Description

HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5547

Credits & Attribution

No credits recorded in the NVD database.

References

More from hauri

View All →
CVE-2009-4476
Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00...
Critical 10
CVE-2006-0864
filescan in Global Hauri ViRobot 2.0 20050817 does not verify...
Critical 10
CVE-2005-4786
Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as...
Medium 4
CVE-2005-2720
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll)...
High 7.5
CVE-2005-2670
Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert...
Medium 5

Affected Vendor

Affected Software

virobot
Vulnerable Versions:
2008.9.12.1375, 2008.12.4.1499

Timeline

Official Publish: December 12th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.