Signature Detail
Short Name |
POP3:EXT:DOT-ADE |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
POP3 |
Keywords |
.ade e-mail attachment |
Release Date |
2004/08/04 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: .ADE
This signature detects e-mail attachments that have the extension .ade and were received through POP3. Because .ADEs (Microsoft Access Project Extension) files can contain macros, this can indicate an incoming e-mail virus. Attackers can create malicious scripts, tricking users into executing the macros and infecting the system.
Extended Description
The impact on the target system is dependent on the instructions contained in the malicious .ade file.
References