PaulDotCom mailing list archives

Re: Embedded Malware


From: Bruce Barnett <grymoire () gmail com>
Date: Thu, 27 Jan 2011 09:52:09 -0500

On Tue, Jan 25, 2011 at 2:27 PM, Subba Rao <kleanchap () tanucoo com> wrote:


His argument is that Malware inside a media file is considered data.


Ask him to define  "media" and to give you examples of what sort of media he
is thinking of.

A PDF file can contain links to web pages that execute javascript in your
browser when you view the page. Adobe Flash media  is really a wrapper that
tells the player what program to use, and how to interpret the data (the
codec). In some cases the player executable can be embedded in the media
wrapper. Media is NOT just data.

And as others have said, even if you *have* pure "data", there are buffer
overflows, etc.
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

Current thread: