Vulnerability Development mailing list archives

Re: Infected jpeg files?


From: Blue Boar <BlueBoar () thievco com>
Date: Thu, 08 Nov 2001 23:09:24 -0800

"Chris D. Sloan" wrote:

As with most things where the question is, "Is it possible...?" the
answere is that, yes it is *possible*.  Someone could have written the
viewer to specifically interpret the JPEG contents as an executable.
The particular viewer you are using might overflow its stack and maybe
a carefully constructed JPEG could take advantage of that to run
malicious code.

http://securityfocus.com/bid/1503


Unless the person who wrote your viewer was malicious, though, I would
suspect the threat of anything like this actually happening in the
real world is about as high as the threat that there exist malicious
text files which would cause Notepad to infect other text files.

Wordpad, not Notepad (AFAIK.)

                                        BB


Current thread: