-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Daniel,
@25 June 2002, 13:04:59 +0200 (12:04 UK time) Daniel van Rooijen [CopyCats] wrote in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED] > is there any way at all that an incoming message could have its > attachment executed, or trigger a macro? Not without the user double-clicking the attachment, ignoring the huge warning box that comes up, clicking on a "Go on - hurt me bad" button and generally submitting to a death-wish. IOW No. Not without doing so longhand. Nothing automatic. > Could The Bat's functionality be abused by a third party program to > spread worms (that is: is the Outbox etc protected from outside > meddling)? I'm not worrying, but if there's any vulnerability, it > would be good to be aware of it. There was a vulnerability at one point where a specially constructed header could exploit a loophole and maybe save a file on the hard disk. Nothing would have made it execute that file automatically and the hole has long since (18 months?) been plugged. It was fixed within 24 hours IIRC. - -- Cheers -- .\\arck D. Pearlstone -- List moderator TB! v1.60q-5523848F0B1 on Windows 2000 5.0.2195 Service Pack 2 ' -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7a-nr2b1 (Windows 2000) iD8DBQE9GFP8OeQkq5KdzaARAndeAJ9WucKjkghm4DlBo4W2jQ3R9/LkVACfUqZ1 o/asB5Ys0nc1xfLvEFGp+Ic= =z5wX -----END PGP SIGNATURE----- ________________________________________________________ Current Ver: 1.60q FAQ : http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Bug Reports: https://www.ritlabs.com/bt/
