Hollow mail viruses ???

  • Thread starter Thread starter Morgan Ohlson
  • Start date Start date
M

Morgan Ohlson

Can viruses be spread through mail without being seen as inclosures
/attachments?


Morgan O.
 
Can viruses be spread through mail without being seen as inclosures
/attachments?

It used to be that a flaw in OE allowed messages to be infested with
malware such as KAK and Bubbleboy. Just reading the message would
cause the user to take a hit. Not much concern with that sort of thing
any more since OE was patched. But you're still better off using a
sane emal app other than OE.

Art

http://home.epix.net/~artnpeg
 
From: "Morgan Ohlson" <[email protected]>

|
| Can viruses be spread through mail without being seen as inclosures
| /attachments?
|
| Morgan O.

Not really viruses but HTML and/or Java script exploits can take advantage in
vulnerabilities in the HTML rendering engine of IE which is used in Outlook Express (OE) and
MS Office Outlook. Such an exploit can be used to indirectly cause a virus to be downloaded
and executed.

One of the reasons not to use OE for home use but to use a program such as Pegasus Mail.

In a corporate setting, good AV software will use MAPI scanning facilities it MS Outlook
connected to an Exchange server to scan an email body for exploitation code.
 
Morgan Ohlson said:
Can viruses be spread through mail without being seen as inclosures
/attachments?

Some spread by including a URL to a web based exploit (user clickable or
Meta-Refreshed HTML). Some in the past have targeted broken software in
the client application itself (notably, but not limited to OE).

Are you seeing loads of apparently blank e-mails?
 
Some spread by including a URL to a web based exploit (user
clickable or Meta-Refreshed HTML). Some in the past have targeted
broken software in the client application itself (notably, but not
limited to OE).

Are you seeing loads of apparently blank e-mails?

I get a few "blank" e-mails a week-some with 1969 in the date!
-max
--
Playing Nice on Usenet:
http://oakroadsystems.com/genl/unice.htm#xpost
My Pages: http://home.neo.rr.com/manna4u/
Change nomail.afraid.org to yahoo.com to reply.
Registered Linux User #393236
 
Back
Top