Embedded Disallowed Filename Extension in Word Document

[Julian Field]

At 16:03 27/03/2003, you wrote:
>I attached a word document with an embedded exe file (exe's are on my
>disallow list).  Is that supposed to get through?

Yes, sorry.

>   Any smart ideas on
>how to stop that.

Not really. Would be quite a lot of extra work to add support for pulling
all the filenames out of OLE documents (and just spotting the OLE documents
in the first place).

>   Also I'm headed out of town in a few minutes so I
>could try it when I get back but what happens if you embedded a virus
>inside a word document?  Would the virus scanner catch it then?

Most virus scanners find documents with viruses in them, as no-one manually
puts a virus in a document, they come ready-supplied with the virus already
in them :)
(i.e. Word macro viruses, etc will be caught by the virus scanners, but not
all scanners will find a copy of EICAR embedded manually in a word doc)
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support