Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

SMTP:EXT:DOT-WSZ

Severity

Medium

Recommended

No

Category

SMTP

Keywords

Winamp Skin File Extension (.WSZ/WAL)

Release Date

2004/09/01

Update Number

1213

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

SMTP: Winamp Skin File Extension (.WSZ/WAL)


This signature detects e-mail attachments with the extension ".wsz" or ".wal" sent through SMTP. This can indicate an incoming e-mail virus. WinAmp Skin files can contain one or more executable scripts. Attackers can create malicious skin files, tricking the user into executing the file and infecting the system.

Extended Description

Remote attackers can exploit this vulnerability to execute arbitrary code with the privileges of the current user.

References

  • CVE: CVE-2004-0820
  • URL: http://www.cknow.com/vtutor/FileExtensions.html
  • URL: http://www.auscert.org.au/render.html?it=4338

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out