June 18th, 2002, 06:05 PM
Vbs scripts in footers of images
Im a newbie and know some visual basic- a mate of mine recently made a program to hide messages in the footers of images. Now i was wonder when you open a jpg it executes the code to show the image, could this be a possible exploit in that you could hide vbs script to do anything you wanted ?
havent tried it - just thought id share it with everyone seeing as im a newbie and may not be good enough to do it... some people may! if u can then tell me and antivirus companies =)
June 18th, 2002, 09:45 PM
Images do not execute. They are data. As it stands today, there is
nothing to exploit. You could embed anything you want in an image file,
including scripts, viruses, or whatnot, but the OS, the image viewer prog,
or internet browser is not designed to regard the image file as
I came in to the world with nothing. I still have most of it.
June 18th, 2002, 09:50 PM
There was actually a thread about this in the last week. You have to install something on the computer ahead of time to get the code to run. An image doesn't actually run, your image viewing program does...
\"Ignorance is bliss....
but only for your enemy\"
June 18th, 2002, 09:52 PM
I read an article earlier today about something similar to this.
The virus was encoded inside the jpg file, but the only way to launch the virus was to have also had a "handler" program that actually took the .jpg association and then executed the code contained in the jpg. Once that code was run, it passed the picture file on to the appropriate viewer.
Definately not an easy way to be attempting to infect targets.
June 19th, 2002, 02:14 PM
Images *cannot* contain viruses, neither do they have footers. Images aren't executable (only readable and writable), so any virus code implemented in them will never execute. If an image did contain virus code, it would be the image viewer that executed it, but then it would be your fault for downloading a dodgy graphics package off the net.