# CVEs published 2008-12-12

49 CVEs were published on December 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5520](https://cve.now/CVE-2008-5520.md): AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malwar (no CVSS)
- [CVE-2008-5521](https://cve.now/CVE-2008-5521.md): Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware (no CVSS)
- [CVE-2008-5522](https://cve.now/CVE-2008-5522.md): AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document (no CVSS)
- [CVE-2008-5523](https://cve.now/CVE-2008-5523.md): avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML docume (no CVSS)
- [CVE-2008-5524](https://cve.now/CVE-2008-5524.md): CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an H (no CVSS)
- [CVE-2008-5525](https://cve.now/CVE-2008-5525.md): ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML (no CVSS)
- [CVE-2008-5526](https://cve.now/CVE-2008-5526.md): DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML docu (no CVSS)
- [CVE-2008-5527](https://cve.now/CVE-2008-5527.md): ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by pl (no CVSS)
- [CVE-2008-5528](https://cve.now/CVE-2008-5528.md): Aladdin eSafe 7.0.17.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by (no CVSS)
- [CVE-2008-5529](https://cve.now/CVE-2008-5529.md): CA eTrust Antivirus 31.6.6086, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML docu (no CVSS)
- [CVE-2008-5530](https://cve.now/CVE-2008-5530.md): Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document (no CVSS)
- [CVE-2008-5531](https://cve.now/CVE-2008-5531.md): Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML docum (no CVSS)
- [CVE-2008-5532](https://cve.now/CVE-2008-5532.md): Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detect (no CVSS)
- [CVE-2008-5533](https://cve.now/CVE-2008-5533.md): K7AntiVirus 7.10.541 and possibly 7.10.454, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in (no CVSS)
- [CVE-2008-5534](https://cve.now/CVE-2008-5534.md): ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware i (no CVSS)
- [CVE-2008-5535](https://cve.now/CVE-2008-5535.md): Norman Antivirus 5.80.02, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document (no CVSS)
- [CVE-2008-5536](https://cve.now/CVE-2008-5536.md): Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document b (no CVSS)
- [CVE-2008-5537](https://cve.now/CVE-2008-5537.md): PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML documen (no CVSS)
- [CVE-2008-5538](https://cve.now/CVE-2008-5538.md): Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing (no CVSS)
- [CVE-2008-5539](https://cve.now/CVE-2008-5539.md): RISING Antivirus 21.06.31.00 and possibly 20.61.42.00, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of (no CVSS)
- [CVE-2008-5540](https://cve.now/CVE-2008-5540.md): Secure Computing Secure Web Gateway (aka Webwasher), when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of m (no CVSS)
- [CVE-2008-5541](https://cve.now/CVE-2008-5541.md): Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document (no CVSS)
- [CVE-2008-5542](https://cve.now/CVE-2008-5542.md): Sunbelt VIPRE 3.1.1832.2 and possibly 3.1.1633.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malw (no CVSS)
- [CVE-2008-5543](https://cve.now/CVE-2008-5543.md): Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML docume (no CVSS)
- [CVE-2008-5544](https://cve.now/CVE-2008-5544.md): Hacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection (no CVSS)
- [CVE-2008-5545](https://cve.now/CVE-2008-5545.md): Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection (no CVSS)
- [CVE-2008-5546](https://cve.now/CVE-2008-5546.md): VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML docume (no CVSS)
- [CVE-2008-5547](https://cve.now/CVE-2008-5547.md): HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection (no CVSS)
- [CVE-2008-5548](https://cve.now/CVE-2008-5548.md): VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by p (no CVSS)
- [CVE-2008-5549](https://cve.now/CVE-2008-5549.md): Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to acc (no CVSS)
- [CVE-2008-5550](https://cve.now/CVE-2008-5550.md): Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remo (no CVSS)
- [CVE-2008-5551](https://cve.now/CVE-2008-5551.md): The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS atta (no CVSS)
- [CVE-2008-5552](https://cve.now/CVE-2008-5552.md): The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS atta (no CVSS)
- [CVE-2008-5553](https://cve.now/CVE-2008-5553.md): The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which all (no CVSS)
- [CVE-2008-5554](https://cve.now/CVE-2008-5554.md): The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a U (no CVSS)
- [CVE-2008-5555](https://cve.now/CVE-2008-5555.md): Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which all (no CVSS)
- [CVE-2008-5556](https://cve.now/CVE-2008-5556.md): The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are e (no CVSS)
- [CVE-2008-5486](https://cve.now/CVE-2008-5486.md): SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2008-5487](https://cve.now/CVE-2008-5487.md): Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-5488](https://cve.now/CVE-2008-5488.md): SQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL commands via the passfro (no CVSS)
- [CVE-2008-5489](https://cve.now/CVE-2008-5489.md): SQL injection vulnerability in channel\_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2008-5490](https://cve.now/CVE-2008-5490.md): SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id para (no CVSS)
- [CVE-2008-5491](https://cve.now/CVE-2008-5491.md): SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageI (no CVSS)
- [CVE-2008-5492](https://cve.now/CVE-2008-5492.md): Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remo (no CVSS)
- [CVE-2008-5493](https://cve.now/CVE-2008-5493.md): SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-5494](https://cve.now/CVE-2008-5494.md): SQL injection vulnerability in the Contact Information Module (com\_contactinfo) component 1.0 for Joomla! allows remote attackers to execute (no CVSS)
- [CVE-2008-5495](https://cve.now/CVE-2008-5495.md): Unspecified vulnerability in the GungHo LoadPrgAx ActiveX control 1.0.0.6 and earlier allows remote attackers to execute arbitrary Java appl (no CVSS)
- [CVE-2008-5496](https://cve.now/CVE-2008-5496.md): SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-5497](https://cve.now/CVE-2008-5497.md): BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login\_auth cookie to true. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.