Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Knock, Knock, Knock
Kelly Martin, 2004-02-20

If hundreds of thousands of people are still blindly clicking on attachments in their email, is there any hope of mitigating the threat of hundreds of thousands of compromised systems with open backdoors?

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
HTML/MIME vulnerability (and avoidance) 2004-02-26
Anonymous
Nope - MIME provides just a transport, as does SMTP headers.

Reasonably sane programming handles that.

HTML interpreters are truly horrible things to debug. Avoiding HTML flat out avoids:

a. javascript interpreters
b. image loaders
c. additional network connections
d. other interpreters ...

[ more ]  





 

Privacy Statement
Copyright 2008, SecurityFocus