Blocked bmp files (buffer overflow) anyone?

[Scott Silva]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

If it is bugging you, change the restriction in filename.rules, as this
became the default a month or so ago.
Julian Field wrote:
> This is from a Microsoft vulnerability a few months back. Most machines
> of course should have the patch installed by now, but I bet they haven't.
>
> I blocked *.bmp files for quite a while. But I dropped that block recently.
>
> Pentland G. wrote:
>
>> Hi all,
>>
>> I've been getting reports of "possible buffer overflow" in bmp files and
>> hence being stripped.
>>
>>
>> It is my assumption at this time that our friendly neighbourhood virus
>> checker (Sophos) is doing this.
>>
>> Have any of you guys out there seen this?
>>
>> Do any of you use Sophos and seen it doing this?
>>
>> For now I've turned the logging detail up and I'll let you all know if I
>> find the cause.
>>
>> Thanks for any info,
>>
>> Gary



--
   ,---.____________      _        ============   .
 /'                  \   |  \       I_  O  _I_,==.:
| A beer doesn't get  >--|===`-----'I `---' I |  |:
| upset if you come  /  _ \         I       I |  |:'
| home with another /  (   `-,----============:__;:
| beer!            /  (_    O   __)       \_      :
| ,,---.__________/     (______)          (_)
:/

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!