tiff causing DOS message

Julian Field mailscanner at ecs.soton.ac.uk
Tue Oct 5 08:27:16 IST 2004


<x-flowed>
What happens when you try to scan the tif manually?

At 23:32 04/10/2004, you wrote:
>Hello
>
>We have a customer that is attempting to send a tif file that is a little
>over 3.5 mb, when trying to send he receives the following error:
>
>The following e-mails were found to have: Virus Detected
>
>     Sender: xxxxxx at pris.bc.ca
>IP Address: 64.114.126.175
>  Recipient: xxxxxx at peacecountry.com
>    Subject: '...are' sticker
>  MessageID: i94Kea0D007039
>     Report: Denial of Service attack in message!
>             Denial of Service attack in message!
>
>
>The interesting part of the df file is:
>
>--============_-1115191450==_============
>Content-Type: text/plain; charset="us-ascii" ; format="flowed"
>
>hello doris & frances,
>
>please find the attached layout of the sticker that you requested.
>
>
>thanks!
>
>jesh 250-782-6068
>--============_-1115191450==_============
>Content-Id: <a05200f00bd87873eaf3f@[192.168.0.102].0.0>
>Content-Type: image/tiff; name="are.tif"
>  ; x-mac-type="54494646"
>  ; x-mac-creator="3842494D"
>Content-Disposition: attachment; filename="are.tif"
>Content-Transfer-Encoding: base64
>
>
>I have looked as best I can but cannot find a reason for this, we are
>running MS-4.33.3 with ClamAV-0.80rc2

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>



More information about the MailScanner mailing list