From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/61504 Path: news.gmane.org!not-for-mail From: Reiner Steib Newsgroups: gmane.emacs.gnus.general Subject: Re: Gnus vulnerable to virus? Date: Mon, 12 Dec 2005 19:32:10 +0100 Organization: Dept. of Theoretical Physics, University of Ulm Message-ID: References: Reply-To: Reiner Steib NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1134415223 26368 80.91.229.2 (12 Dec 2005 19:20:23 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Mon, 12 Dec 2005 19:20:23 +0000 (UTC) Original-X-From: ding-owner+m10036@lists.math.uh.edu Mon Dec 12 20:20:19 2005 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by ciao.gmane.org with esmtp (Exim 4.43) id 1EltDb-00041j-U5 for ding-account@gmane.org; Mon, 12 Dec 2005 20:20:16 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu ident=lists) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1EltDT-0000X9-00; Mon, 12 Dec 2005 13:20:07 -0600 Original-Received: from nas01.math.uh.edu ([129.7.128.39]) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1EltA3-0000X4-00 for ding@lists.math.uh.edu; Mon, 12 Dec 2005 13:16:35 -0600 Original-Received: from quimby.gnus.org ([80.91.224.244]) by nas01.math.uh.edu with esmtp (Exim 4.52) id 1Elt9w-0007vb-3M for ding@lists.math.uh.edu; Mon, 12 Dec 2005 13:16:35 -0600 Original-Received: from main.gmane.org ([80.91.229.2] helo=ciao.gmane.org) by quimby.gnus.org with esmtp (Exim 3.35 #1 (Debian)) id 1Elt9v-0003PR-00 for ; Mon, 12 Dec 2005 20:16:27 +0100 Original-Received: from list by ciao.gmane.org with local (Exim 4.43) id 1Elt7Z-0002eh-P7 for ding@gnus.org; Mon, 12 Dec 2005 20:14:01 +0100 Original-Received: from bridgekeeper.physik.uni-ulm.de ([134.60.10.123]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 12 Dec 2005 20:14:01 +0100 Original-Received: from Reiner.Steib by bridgekeeper.physik.uni-ulm.de with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 12 Dec 2005 20:14:01 +0100 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: ding@gnus.org Original-To: ding@gnus.org Original-Lines: 33 Original-X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: bridgekeeper.physik.uni-ulm.de X-Face: /U7=m^"/-Dn61mAl{g9e3>\G5Tp,oEX|V)g2I1hBk\ML;)7A?6cmB-y7y?'NA^J<=oz7syB =(McAwIHgLX!.B?R3X}98d@?>CrT094KLWh]WU4gDpnL/")MS(XoQTv`Oq225uL>+;CpPXo$N5e>N> $tPd-gbB^F{gQS#1ase]XO~D4p4M"3+F-7~u]dy3I?Pb8RO*H-EFeWDUf?Rf,d]pv\Jvh2Cht!A=im yKAS2Z%Ao^;}W/qzMvMm Mail-Copies-To: nobody User-Agent: Gnus/5.110004 (No Gnus v0.4) Emacs/22.0.50 (gnu/linux) Cancel-Lock: sha1:CG84eaEb4lN8ygm6iqufUbKzMwM= X-Spam-Score: -2.5 (--) Precedence: bulk Original-Sender: ding-owner@lists.math.uh.edu Xref: news.gmane.org gmane.emacs.gnus.general:61504 Archived-At: On Mon, Dec 12 2005, David Abrahams wrote: > I have always thought, smugly, that by using Gnus I was insulating > myself from viruses. However, when I looked at the enclosed email > under NTEmacs, I got a dialog box saying that no known program could > open mm.304-VK (actually, the characters after "mm." vary each time I > look at the email). Your "possible-virus" has the following MIME structure: <* alternative> Re: tangle chairmanship <1.* alternative> <1.1 text> <1.2 html> <2 gif> In the default config, Gnus will automatically display the GIF image. See the recent thread on "spam mails using image/gif in multipart/alternative": http://thread.gmane.org/v94q5j5m1q.fsf%40marauder.physik.uni-ulm.de > This seems like it's a few bytes away from being able to run > arbitrary programs. Only if you have stupidly configured Gnus to pass MIME types to the default windows application, e.g. by opening MIME a type with "open". Bye, Reiner. -- ,,, (o o) ---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/