Date: Fri, 08 Feb 2002 18:57:07 +0800
From: Raymond <[EMAIL PROTECTED]>
Subject: RE: [LIB] List problem?

At 02:21 AM 8/02/2002 -0800, you wrote:
>Date: Fri, 08 Feb 2002 10:15:15
>From: "neil barnes" <[EMAIL PROTECTED]>
>Subject: RE: [LIB] List problem?
>
>
>>Date: Thu, 7 Feb 2002 20:22:05 -0600
>>From: "phillip ramirez" <[EMAIL PROTECTED]>
>>Subject: RE: [LIB] List problem?
>>
>>Nope but yes a pic can contain executable code packaged in the jpg
>>itself.. Its how irc virus's are trasnmitted.. Anyway no virus on my
>>end.. I didn�t open the att file.. What the heck what will it hurt? Haha
>>I have a 20 gig hard drive waiting to go in this thinkpad haha
>
>Can you explain further please? AFAIK there's nowhere in a jpg file structure to 
>carry executables, or even any quantity of extra data. This is not to say of course 
>that just because it *says* it's a jpg that it really is, or that the data enclosed 
>is really a picture...but it won't execute itself, it will just fail to be opened by 
>the graphics software.

The only thing I CAN think of is perhaps the jpeg file having a carefully crafted 
string somewhere that causes a buffer overflow in the viewing program but that'd have 
to assume it was being viewed with a specific decoder, compiled a certain way. 
Certainly a long shot given the wide variety of viewing programs and jpeg decoding 
libraries available ... certainly embedding pure executable code wouldn't help because 
the viewing program would just ignore it.


>I also thought that most IRC viruses were script viruses? Maybe I'm behind the times 
>:)

Some are .dll files as well (because remember, many IRC clients can now link DLL's).


- Raymond

---


/~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\
|                 | "Does fuzzy logic tickle?"                |
|   ___           | "My HDD has no reverse. How do I backup?" | 
|  /__/           +-------------------------------------------|
| /  \ a y b o t  |          [EMAIL PROTECTED]             |
|                 |          HTTP://www.raybot.net            |
| ICQ: 31756092   |   Need help? Visit #Windows98 on DALNet!  |
\~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~/




**************************************************************
http://libretto.basiclink.com - Libretto mailing list
http://libretto.basiclink.com/archive - Archives
http://www.picante.com/~gtaylor/portable/faq.html - FAQ
                 -------TO UNSUBSCRIBE-------
Reply to any of the list messages. The reply mail should be
addressed to: [EMAIL PROTECTED] - Then replace any text
on the message's subject line: cmd:unsubscribe
              --------TO UNSUBSCRIBE DIGEST------
Do above but with this on subject line: cmd:unsubscribe digest
**************************************************************

Reply via email to