Malware Detection Bypass in AVG Anti-Virus 8.0.0.161

CVE-2008-5522

What is CVE-2008-5522?

The AVG Anti-Virus 8.0.0.161 version, when used with Internet Explorer 6 or 7, is susceptible to a vulnerability that allows attackers to evade malware detection. This is achieved by embedding an MZ header, commonly recognized as 'EXE info,' at the start of HTML documents. Attackers can modify the filenames to have no extension, or have a .txt or .jpg extension, effectively masking malicious content. This exploitation method is associated with a well-known exploit (CVE-2006-5745), which raises significant concerns for users relying on this antivirus solution for protection against malware.

References