Bypass Vulnerability in ESET NOD32 Antivirus Affecting Internet Explorer Users

CVE-2008-5534

What is CVE-2008-5534?

ESET NOD32 Antivirus versions 3662 and 3440 allow attackers to circumvent malware detection while using Internet Explorer 6 or 7. This vulnerability arises from the ability to manipulate an HTML document by adding an MZ header, which is typically associated with executable files, and renaming the file to either have no extension, a .txt extension, or a .jpg extension. This manipulation can lead to remote execution of malicious exploits, including previously known vulnerabilities.

References