Re: [Nolug] music collection from Mischa D. Krilov on 2011-02-15 (nolugarchives)

From: Mischa D. Krilov <rossum_at_gmail.com>
Date: Tue, 15 Feb 2011 21:53:44 -0600
Message-ID: <AANLkTi=Cd95RtcMguq6hR+ZpLfbthtRK=SPBW-9JKnsZ@mail.gmail.com>

When XP Home first came out (I'm talking service pack zero here), you
could maliciously craft a MP3 ID3 tag such that you could run
arbitrary code simply by mousing over the malicious file.

But that's an extreme example. You could always take "evilbadware.exe"
and rename it to "superpopmegahit.mp3" and it wouldn't play in iTunes.

Mischa

-- 
Read my blog: http://rossum.blogspot.com
___________________
Nolug mailing list
nolug@nolug.org

Received on 02/15/11