[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 01 Feb 2005 23:16:17 +0000
From: Trog <trog@...on.org>
To: bugtraq@...urityfocus.com
Subject: Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
On Tue, 2005-02-01 at 14:41 -0800, Dack wrote:
> > > By sending a base64 encoded image file in a URL an attacker could evade
> > > virus scanning.
> > It's somewhat harsh to single out ClamAV for this issue. AFAICT, the
> > only two virus scanners that do currently protect against this are
>
> What mail clients, if any, would execute a virus encoded in this manner?
> Is this a gaping hole in other mail anti-virus systems, or do most
> clients just ignore this kind of data?
I really haven't tested mail clients, but Thunderbird would be the most
likely.
-trog
Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)
Powered by blists - more mailing lists