[Techtalk] new spam thingy

[Ms. Piglet]

Actually, what I've been hearing about (and paying minimal attention to,
admittedly, as a Mac/Linux user) is executable code embedded in HTML, so
that displaying the HTML email causes it to execute. (This in email, not in
webpages....)  Now how valid that is, I've not a clue; it's just been the
buzz going by---I think the mechanism is something to do with the code in
the HTML triggering the attachment, and email programs that automatically
stash the attachment elsewhere are fairly immune, as is of course anyone who
disables HTML in their email.

--pig

On 11/21/02 22:40,  <mariab at cats.meow.at> shared this thought:

> On Thu, 21 Nov 2002, Alvin Goats wrote:
> 
>> WindowsExecutbleFile with mime command to execute the file
> 
> I wasn't aware that MIME included the ability to send commands to execute
> a program.  In fact I'm almost 100% sure of that.
> 
> Traditionally, viruses of this type have relied on the gullibility of
> users to run the program.  However recently I heard people muttering
> something about exploits for outlook that made it run arbitrary code
> simply by recieving an email, which could feasibly, of course, include
> chaining an executable from an attachment.
> 
> just my 3p  (inflation, you see:)
> 
> Maria
> 
> _______________________________________________
> Techtalk mailing list
> Techtalk at linuxchix.org
> http://mailman.linuxchix.org/mailman/listinfo/techtalk