Malicious media - ASF scripting

Marius van Oers McAfee Avert Network Associates

Popular peer to peer transfer files like .MP3, .ASF and .JPG files are until now exempt from native malware. What so far happened is that the file content as such is of a complete different filetype so it just has a deceiving file extension to trick the user.

But this doesn't mean that media files are always guaranteed to be safe. Windows media files like .ASF (Advanced Systems Format) files can contain audio and video data but it can also contain other Binary files and it supports Scripting. This might become a possible new threat area in the future.

This paper will mainly focus on the .ASF file structure and the possible security issues related to that.


Poll

Do you use the same password(s) across multiple websites?
I use the same password for all sites
I have a number of passwords but use the same for some sites
I use a different password for each site
I don't sign up to any sites that require a password

Leave a comment
View 4 comments

Jobs Career Sidebar

Jobs

In Virus Bulletin's jobs pages among others:
Virus Bulletin currently has 190,996 registered users.