Malicious media - ASF scripting
Marius van Oers McAfee Avert Network Associates
Popular peer to peer transfer files like .MP3, .ASF and .JPG files are until now exempt from native malware. What so far
happened is that the file content as such is of a complete different filetype so it just has a deceiving file extension
to trick the user.
But this doesn't mean that media files are always guaranteed to be safe. Windows media files like .ASF
(Advanced Systems Format) files can contain audio and video data but it can also contain other Binary files and it
supports Scripting. This might become a possible new threat area in the future.
This paper will mainly focus on the .ASF file structure and the possible security issues related to that.