It depends on the version of the client, the internet security zone used by 
Outlook, and the settings of that security Zone.

Russ Cooper published an article entitled "How Active is ACtive Content in 
Email?" a few years ago now on http://www.ntbugtraq.com - it's in the FAQ 
section.
http://www.ntbugtraq.com/default.asp?sid=1&pid=47&aid=56
Links may wrap.

The basic upshot is this - disable ActiveX in email.  In fact I disable 
everything by first setting the security Zone for email to High, and then 
modifying the settings of my High Security Zone so everything - even font 
downloads - are disabled.

(In case anyone thinks I'm paranoid for disabling font downloads be aware 
that an earlier version of Netscape had a buffer overrun which could be 
exploited via a malformed font download.  I am not aware of a similar 
exploit in IE and Outlook, but the fact that your email was written in Comic 
Sans MS isn't important enough to me to worry about it.)

The issue this leaves is that WAV files and Images are still downloaded 
automatically in email and the browser.  I can disable this across the 
board, but not per security zone.



----Original Message Follows----
From: "Hoxie, Glenn" <[EMAIL PROTECTED]>
Reply-To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
Subject: Viruses & Outlook
Date: Wed, 26 Sep 2001 09:14:14 -0400

Given this surge of virus discussions in this discussion group, I wanted to
ask a quick question.

If a person has the preview pane enabled on their Outlook client, isn't this
the equivalent of opening the message?  Many thanks!



_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to