Malware Detection Bypass in Trend Micro Antivirus Products

CVE-2008-5545

Summary

The vulnerability in Trend Micro AntiVirus, particularly in version 8.700.0.1004, arises when leveraging Internet Explorer 6 or 7. It enables remote attackers to circumvent malware detection mechanisms by manipulating the content of HTML documents. By placing an MZ header at the beginning of such documents and altering the filename to exclude traditional extensions, or using extensions like .txt or .jpg, attackers can introduce exploits, including those targeting CVE-2006-5745, without triggering detection alerts from the antivirus software.

References