Results 1 to 4 of 4

Thread: embedded object in word

  1. #1
    Join Date
    Jun 2004

    embedded object in word

    we have blocked zip files on our email server using commercial email scanners.
    recently, i have used object packager and embed an object (zip file) in a word document (word docs are not blocked) and the email scanners did not detect the zip file in the word document.
    are there ways, besides removing the object packager or installing other email scanners that can do the job, can we detect zip files embedded in word documents?

  2. #2
    Join Date
    Jul 2005
    I don't know the answer. However, I do realise that Word documents can even be more harmful than ZIP files, if you receive them through email. Why? Because Word documents allow the execution of scripts that are contained within the document. And a careless user might activate a damaging script that way.

    So I am amazed that you consider ZIP files to be more dangerous than Word files. Especially since many virusscanners are able to scan the contents of a ZIP file, yet most have problems with the contents of Word documents. Both are dangerous, btw. Then again, every email user should be aware that they should not open ANY attachment that they receive from someone whom they don't know. (And if they're smart, they don't even open attachments from people whom they do know, if they haven't asked for these attachments!)

    A good, secure system starts with the proper education of it's users. And whomever refuses to learn proper security measures is just a security hazard.

  3. #3
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    United Kingdom: Bridlington
    the email scanners did not detect the zip file in the word document.
    They wouldn't, I would bet that they are only checking for attachments, so any crap embedded in a Word document will get through. Katja is quite right with her warning.

    Check your scanning application settings. You might even need to get a more functional one. You need to scan for objects inside Word and Excel documents. You also need to scan for executables of any type.

  4. #4
    AO Curmudgeon rcgreen's Avatar
    Join Date
    Nov 2001
    If you're not permitted to block word documents, you may as well
    just surrender to the inevitable. The irresistable convenience
    of a popular format will trump security every time.
    I came in to the world with nothing. I still have most of it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts