Back to CVE Browser

CVE-2008-5547

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1870%

EPSS Percentile9.19th

PublishedDec 12, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

Affected Platforms (CPE)

📦

Hauri

Virobot

= 2008.9.12.1375

📦

Hauri

Virobot

= 2008.12.4.1499

References & Advisories

🔗 http://securityreason.com/securityalert/4723

🔗 http://www.securityfocus.com/archive/1/498995/100/0/threaded

🔗 http://www.securityfocus.com/archive/1/499043/100/0/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/47435

🔗 http://securityreason.com/securityalert/4723

🔗 http://www.securityfocus.com/archive/1/498995/100/0/threaded

🔗 http://www.securityfocus.com/archive/1/499043/100/0/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/47435

Related Vulnerabilities

CVE-2006-086410.0

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain admini...

CVE-2009-447610.0

Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote attackers to execute arbitrary code vi...

CVE-2005-27207.5

Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot ...

CVE-2005-20415.0

Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code v...