Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security NTBugtraq
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML pars

from [Bill Royds] Network Security [Permanent Link]
Subject: Re: Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser
Date: Wed, 12 Jan 2005 11:21:23 -0500 
Microsoft Outlook 2003 with McAfee VirusScan is also sometimes susceptible to
this vulnerability, depending on the virus found. Files infected by dumaru are
most often prone to it.
Because Outlook 2003 can download only headers of a message (download Inbox
headers under Send/Receive), you can then delete them without loading whole
message, clearing the queue.

-----Original Message-----
From: Windows NTBugtraq Mailing List [mailto:NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM]
On Behalf Of Peter Kruse
Sent: Monday, January 03, 2005 7:50 AM
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Subject: Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser

--
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an 
Anti-Virus product which automatically notifies the perceived sender of a 
message it believes is infected may well cause more harm than good. Someone who 
did not actually send you a virus may receive the notification and scramble 
their support staff to find an infection which never existed in the first 
place. Suggest such notifications be disabled by whomever is responsible for 
your AV, or at least that the idea is considered.
--
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Veritas Backup Exec Name Service Remote Universal Exploit, Keif Gwinn
Next by Date:  Administrivia #29414 - Virus/Exploit detected in NTBugtraq messages, Russ
Previous by Thread:  Remote DoS in GFI MailEssentials due to a bug in Microsoft HTML parser, Peter Kruse
Next by Thread:  EEYE: Windows ANI File Parsing Buffer Overflow, Derek Soeder
Indexes:  [Date] [Thread] [Top] [All Lists]