WMF Exploit

[Dan Hollis]

On Thu, 29 Dec 2005, Scott Silva wrote:
> Dan Hollis spake the following on 12/29/2005 2:26 PM:
>> On Thu, 29 Dec 2005, Spicer, Kevin wrote:
>>> My file command didn't detect wmf files, so for anyone else in that boat
>>> heres how to add it (assuming the magic file is /usr/share/magic)
>>> Add this line to /usr/share/magic
>>> 0       lelong          0x9ac6cdd7      Windows Metafile Image data
>> This signature seems wrong.
>> # Ripped straight from wmf_exp.wmf
>> sub wmf_head {
>>         return
>>         "\x01\x00\x09\x00\x00\x03\x52\x1f\x00\x00\x06\x00\x3d\x00\x00\x00".
> I have this in my /usr/share/magic;
> # Microsoft Advanced Streaming Format (ASF) <mpruett at sgi.com>
> 0       belong                  0x3026b275      Microsoft ASF

also wrong. thats ASF, not WMF

-Dan

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!