Results 1 to 10 of 11

Threaded View

  1. #11
    Just Another Geek
    Join Date
    Jul 2002
    Rotterdam, Netherlands
    Exactly. Never trust an extension (or MIME type for that matter).

    A Windows WMA file can contain active content (like javascript for instance). A true MP3 cannot. But you can rename a WMA file to MP3 and Windows mediaplayer will happily play it, including it's active content.

    If you're looking for a content scanner you always need to make sure it doesn't only look at the extension or MIME type, both can be faked or changed easily. A proper content scanner will analyze the file to see what it really is and block or allow it based on that.
    Last edited by SirDice; November 10th, 2011 at 07:41 AM.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

Similar Threads

  1. Windows Error Messages
    By cheyenne1212 in forum Miscellaneous Security Discussions
    Replies: 7
    Last Post: February 1st, 2012, 01:51 PM
  2. The history of the Mac line of Operating systems
    By gore in forum Operating Systems
    Replies: 3
    Last Post: March 7th, 2004, 07:02 AM
  3. executable files
    By rcgreen in forum The Security Tutorials Forum
    Replies: 1
    Last Post: October 4th, 2002, 05:07 AM
  4. Black Wolf's Guide to Memory Resident Viruses.
    By ahmedmamuda in forum AntiVirus Discussions
    Replies: 2
    Last Post: March 20th, 2002, 01:03 AM
  5. Camouflage v1.2.1 The programme
    By Gbin@ryR in forum AntiOnline's General Chit Chat
    Replies: 8
    Last Post: February 28th, 2002, 04:52 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

We have made updates to our Privacy Policy to reflect the implementation of the General Data Protection Regulation.