JPEG Exploit Could Beat Antivirus Software

KingFishKingFish
edited October 2004 in Science & Tech
Antivirus software could be ill-prepared to protect corporate networks from the latest Windows vulnerability--innocent-looking JPEG files that contain security attacks.
According to Mikko Hypponen, director of antivirus research for F-Secure, antivirus software will strain to find JPEG malware, because by default, it only searches for .exe files. "Normal antivirus software, by default, will not detect JPEGs," Hypponen said. "You can set your antivirus scanner to look for JPEG, but the trouble is that you can change the file extension on a JPEG to so many things." There are about 11 file name extensions to which JPEGs can be changed, including .icon or .jpg2. Hypponen said this would make finding malicious JPEGs even more difficult; searching could take up a significant amount of valuable processor power.
Source: ZDNet

Comments

  • mmonninmmonnin Centreville, VA
    edited September 2004
    Just keep talking about it and someone is bound to make a virus to exploit it.
  • Straight_ManStraight_Man Geeky, in my own way Naples, FL Icrontian
    edited October 2004
    Prototype exploits are already on the web.Have been for two weeks+, that is how long I have been filtering them.
Sign In or Register to comment.