Re: New "concept" virus/worm?

[Ryan Russell <ryan () securityfocus com>]

On Tue, 18 Sep 2001, Brett Glass wrote:

> Can the e-mail infect anything other than Windows NT/2000?

Yes.

> Will it infect
> a system that's running Windows NT/2000 but not IIS?

Through IE or Outlook/OE, yes.

> If a Windows 95/98/ME
> user opens it, will his or her system begin to spread the worm as well?

yes.

It takes advantage of this hole for any mothod you get the .eml file (web
browser or e-mail client):
http://www.securityfocus.com/bid/2524
I think everything up through early versions of XP had that hole at one
time, if they had the vulnerable version of Media Player.

                                        Ryan


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com