Thanks David. I suppose we should check to make absolutely sure
though. Does anyone have a GDI+ Exploit that they can send me off-list
that isn't zipped, or a link to a test sender? I did some searching and
didn't find one. If others want to test and share their results, that
would also be fine with me.
Thanks,
Matt
David Franco-Rocha [ Declude ] wrote:
From the source it looks like the JPG woul be scanned for the GDIPlus
vulnerability regardless of these other directives.
David Franco-Rocha
Declude Technical Support
----- Original Message ----- From: "Matt" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, May 06, 2005 12:57 PM
Subject: [Declude.Virus] Question concerning SKIPEXT and GDI+
Vulnerability detection
To my good buddies at Declude :) (ok, you made me very happy twice
yesterday)
I understand that SKIPEXT JPG would cause files with JPG extensions
to not be scanned with the virus scanners, but would that also
disable the JPG/GDI+ Vulnerability detection?
Many of us stopped skipping JPG's and other associated files when the
GDI+ exploits were first discovered, but they seem to have become
duds as far as actively spreading viruses (though I have seen them on
sites linked to in spam as a way to install spyware). JPG's however
are fairly common in E-mail and it would be a big improvement to be
able to skip scanning them, and if we were protected with the
vulnerability detection, I would feel comfortable turning off virus
scanning of JPG's until a mass-mailing virus is seen. I wouldn't
want to leave myself completely unprotected however.
Thanks,
Matt
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
