OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NTBugtraq And NTSecurity Archives: Re: A couple of virus notes

Re: A couple of virus notes


Russ (Russ.CooperRC.ON.CA)
Thu, 11 Nov 1999 23:37:11 -0500


-----BEGIN PGP SIGNED MESSAGE-----

I seemed to have found a bit of confusion with my message yesterday.
Seems that there are many different actions done by the various
Outlook programs to email depending on how a message is being viewed.

The information isn't currently available in the form of a KB article
or in MSDN, but with the help of the Product Managers for IE, Outlook
Express, and Outlook, I was able to gather the information and put it
into a web page.

Basically, you'll find an explanation of what each version (Outlook
Express, Outlook 98, and Outlook 2000) does to/with content, in each
of the various viewing windows (Open, Preview Pane, or AutoPreview).

It does make it clear that there's no way to know that a message
contains malicious (or potentially malicious) code prior to opening
it. Security Zones are your only protection with these clients.

Anyway, give the page a look;

<http://ntbugtraq.ntadvice.com/outlookviews.asp>

Cheers,
Russ - NTBugtraq Editor

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2

iQCVAwUBOCuaARBh2Kw/l7p5AQHJEQP/UMfTLtKPQU01r21BLmCn3j/xpG1VDs7t
0cnioVoQQGNFdtJnG0rvW0z8gy++D47OHHw9gs2a57xyj7wodz8mwcMwifeiu5q1
70h8teaCCP7E8Urnzm0midhSxZFEJd/7hRtJx9Xmhi6aNu/kjxHDbU1Ji59o276g
fqUgBu4j/go=
=2M8f
-----END PGP SIGNATURE-----



This archive was generated by hypermail 2.0b3 on Thu Nov 11 1999 - 22:37:55 CST