Re: Virus's in images?

From: Jason Edwards (none_at_invalid.invalid)
Date: 12/11/04 

Date: Sat, 11 Dec 2004 11:54:22 -0000

"Skywise" <into@oblivion.nothing.com> wrote in message
news:10rkij031ovo096@corp.supernews.com...
> "Jason Edwards" <none@invalid.invalid> wrote in news:31t4koF3e9jhiU1
> @individual.net:
>
> > "Skywise" <into@oblivion.nothing.com> wrote in message
> > news:10rhpoe9q95q2c8@corp.supernews.com...
> >> "Jason Edwards" <none@invalid.invalid> wrote in news:31s0q7F3f3jmrU1
> >> @individual.net:
> >>
> >> <Snipola>
> >> > What is the difference between data (jpg or other data) and code
which
> > can
> >> > be executed?
> >> >
> >> > Jason
> >>
> >> Go find a jpeg of your favorite swimsuit model and 'execute' it.
> >
> > Ok. The computer crashed, no surprise there.
> > It's not difficult to get the computer to execute it as code.
> > Obviously this does not mean it will do anything sensible.
> > But suppose I made a file with a jpg extension which _did_ contain valid
> > code...
>
> Then it's not an image. It's a program.
>
> BTW, I did the same thing as you.

Not really. You told me to 'execute' it. You didn't say change the
extension.
So I took a valid exe file and replaced some of the code with the image data
:)

Jason

>
> If I changed a .jpg to an .exe, it either didn't run or crashed, never
> affecting the OS (W2kSP4). Interstingly, 2 of the 3 image editing/viewing
> programs I have still recognized the .exe file correctly as the image
> format it truely was. The one that did not was a Photoshop 5.0 and
> obviously relied on the extension to tell it what the file was. I could
> not force it to open 'any' file.
>
> If I changed an .exe to a .jpg none of my image viewing/edit programs
> would open it. They all said it was an invalid file. I also could not
> get the file to run, either by double click, or start->run.
>
> Brian
> --
> Sed quis custodiet ipsos Custodes?

Relevant Pages

  • Re: problem when renaming
    ... pops up & says that the file may be unusable if I change the extension. ... The extension tells Windows what to do if you double-click the file. ... So if you double-click an .exe file, it will execute it. ...
    (microsoft.public.windowsxp.general)
  • RE: File extensions spoofable in MSIE download dialog
    ... notepad.exe (as a file with the usual ".log" extension would be) ... In no instance was I able to "silently" download and execute an executable ... These are the two browsers I tested with: ...
    (Bugtraq)
  • Re: Is it safe to open a text file in Internet Explorer?
    ... "Download it to your disk, change the extension, then Send To ... an .xml extension you get "The XML page cannot be displayed."." ... I've read, re-read, Googled, and MSN searched -- MSN search is ... way that this can actually execute anything. ...
    (microsoft.public.security)
  • Re: How can I set an app to autorun?
    ... and execute it with Task Scheduler, unless you want to run an executable directly. ... that it compiles to .exe file. ... To build a Windows Service check out the following: ... For the timer, take a peek at the Timer class in the System.Timers ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: New Application Extension reports 404
    ... You actually want .RUN to be handled by Perl, ... please add a Web Service Extension ... /command1.run will execute Perl script1.pl ... but IIS4 had the "RUN" extension mapped to execute a predefined perl script. ...
    (microsoft.public.inetserver.iis)