[Mimedefang] Why does MIMEDefang strip .VCFs
Matthew.van.Eerde at hbinc.com
Matthew.van.Eerde at hbinc.com
Fri Feb 10 11:46:04 EST 2006
Ken Cormack wrote:
> You're right, David...
>
> I compared my list of forbiddeen filename extensions to the one in the
> sample filter. My list has grown over time, and I see that .vcf's
> were added to our filter by our information security group a few
> years ago, when they added most of the list of extensions that MS
> considers directly executable.
>
> Ken
There was an exploit in Outlook...
http://www.microsoft.com/technet/security/bulletin/MS01-012.mspx
Which was actually used...
http://vil.nai.com/vil/content/v_99020.htm
--
Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
More information about the MIMEDefang
mailing list