Signature Detail
Short Name |
POP3:EXT:DOT-MSP |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
POP3 |
Keywords |
.msp e-mail attachment |
Release Date |
2004/07/28 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: .MSP
This signature detects e-mail attachments with the extension .msp received through POP3. This can indicate an incoming e-mail virus. .MSPs (Microsoft Windows Installer Patch) contain executable code. Attackers can create malicious executables, tricking the user into executing the file and infecting the system.
Extended Description
The impact on the target system is dependent on the instructions contained in the malicious .msp file.
References