I'll just answer my part out of that rant you just wrote:

"2) Outlook does not just "execute" attachments by itself? yes and no (ever hear of Active X controls? HTML mails can execute those eaily enough, and just today MS warned of yet another problem w/ IE and ActiveX that somehow hasn't been patched yet.)"

Any good administrator will not allow ActiveX controls to download yet alone execute in the Internet zone, ever looked at the zone settings in IE? (IE/Outlook, use the same zone settings in case you didn't know).

Here, let me help:

Tools
Internet Options
Security
Custom Settings (under the Internet zone)
Scroll down to "ActiveX controls and plug-ins".


Please, if you don't know enough about the topic at hand, don't bother to post.

Regards

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/188/22833#22833