Signature Detail
Short Name |
POP3:EXT:DOT-WSZ-WAL |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
POP3 |
Keywords |
Winamp Skin File Attachment (WSZ/WAL) |
Release Date |
2004/09/01 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: Winamp Skin File Attachment (WSZ/WAL)
This signature detects e-mail attachments with the extension ".wsz" or ".wal" sent through POP3. This can indicate an incoming e-mail virus. WinAmp Skin files can contain one or more executable scripts. Attackers can create malicious skin files, tricking the user into executing the file and infecting the system.
Extended Description
Remote attackers can exploit this vulnerability to execute arbitrary code with the privileges of the current user.
References