PaulDotCom mailing list archives
Re: Embedded Malware
From: Bruce Barnett <grymoire () gmail com>
Date: Thu, 27 Jan 2011 09:52:09 -0500
On Tue, Jan 25, 2011 at 2:27 PM, Subba Rao <kleanchap () tanucoo com> wrote:
His argument is that Malware inside a media file is considered data.
Ask him to define "media" and to give you examples of what sort of media he is thinking of. A PDF file can contain links to web pages that execute javascript in your browser when you view the page. Adobe Flash media is really a wrapper that tells the player what program to use, and how to interpret the data (the codec). In some cases the player executable can be embedded in the media wrapper. Media is NOT just data. And as others have said, even if you *have* pure "data", there are buffer overflows, etc.
_______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
Current thread:
- Embedded Malware Subba Rao (Jan 26)
- Re: Embedded Malware d4ncingd4n (Jan 26)
- Re: Embedded Malware Jonathan Cran (Jan 26)
- Re: Embedded Malware Jim Halfpenny (Jan 26)
- Re: Embedded Malware Michael Salmon (Jan 26)
- Re: Embedded Malware Bruce Barnett (Jan 27)
- <Possible follow-ups>
- Re: Embedded Malware Ryan Sears (Jan 26)