AW: .fdf spam

Julian Field MailScanner at ecs.soton.ac.uk
Fri Aug 10 21:10:48 IST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Eek! I think this is headed for the dangerous filenames list.

R. Ehle (MailScanner Mailinglist) wrote:
>
> Hi,
>
>  
>
> .fdf-Files normally are form data of pdf forms and might be dangerous. 
> If you fill in a form, which has been designed in Acrobat, you can 
> save the data as file (creates a .fdf file). Once you open the .fdf 
> file, it will automatically load the form (a pdf file) too, wherever 
> it is located at (i.e. from the internet)
>
>  
>
> Regards,
>
> Roland
>
>  
>
> *Von:* mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] *Im Auftrag von 
> *Iad Scoot
> *Gesendet:* Freitag, 10. August 2007 20:06
> *An:* MailScanner discussion
> *Betreff:* Re: .fdf spam
>
>  
>
> I think that .fdf files are generated from the Adobe SDK - basically a 
> dynamically-created pdf file.
>
> On 8/10/07, *Gareth* <list-mailscanner at linguaphone.com 
> <mailto:list-mailscanner at linguaphone.com>> wrote:
>
> Today I got my first .fdf spam. It looks basically like a pdf file and
> acrobat opens it as usual but because of the different extension I 
> believe
> the PDFInfo plugin did not scan it. I have mailed the plugin author to let
> him know.
>
> I doubt this method will last long. I had never heard of a .fdf file 
> before
> so I suspect it is something a lot of people will add to the file 
> extensions
> block list.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info 
> <mailto:mailscanner at lists.mailscanner.info>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner 
> <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>  
>
>
> ----------------------------------------------
> Diese E-Mail wurde auf Viren und gefährliche Anhänge
> durch *mailMind(R)* <http://www.mailmind.de>
> untersucht und ist sauber.
> --- mailMind(R) - we have your MailSecurity in mind! --- 

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Charset: ISO-8859-1

wj8DBQFGvMZIEfZZRxQVtlQRAtpZAKDqnY/IiLLHmI3NATXV0sAKr3if/gCeLgNV
9uwd79Nu6qlapumP1k/WoOg=
=8zoi
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list