<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>Detected HTML-specific exploits </TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>I recently had an important email to an exec at my company blocked due to html-specific exploits. The message had a lot of html in it, of which a few items did look strange (if its not html 101, it looks strange to me), but nothing that I could determine as having any malicious intent. </FONT></P>
<P><FONT SIZE=2>My logs indicated the message was blocked because...</FONT>
</P>
<P> <FONT SIZE=2>Content Checks: Detected HTML-specific exploits in i4C2qdWJ019277</FONT>
</P>
<P><FONT SIZE=2>Is there any way for a simpleton like myself to discern what this check looks for in a message? I would like to be able to explain it in a little more detail if possible. </FONT></P>
<P><FONT SIZE=2>Is this just the default output for a message blocked because of the Script/Iframe/object codebase/etc rules in MailScanner.conf? The message did contain some javascript elements in it. </FONT></P>
<P><FONT SIZE=2>Thanks,</FONT>
</P>
<P><FONT SIZE=2>Jason</FONT>
</P>
</BODY>
</HTML>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>