CVE-2008-5523

CVE-2008-5523 describes a critical vulnerability in avast! antivirus 4.8.1281.0, specifically when used with Internet Explorer 6 or 7. This flaw allows remote attackers to bypass malware detection in HTML documents by prepending an MZ header and using specific file extensions (none, .txt, or .jpg), effectively disguising malicious code. With a CVSS score of 9.3, this vulnerability is highly severe, indicating a network-based attack with medium complexity that could lead to complete compromise of confidentiality, integrity, and availability. The high FAUCET Risk Score of 74/100 further emphasizes its potential impact. Despite its severity, there is no evidence of active exploitation (KEV: No), nor is there any publicly available exploit code (Metasploit, Nuclei, ExploitDB: None). Community discussion and media coverage are also absent, suggesting a lack of widespread attention or exploitation.