Re: [WinMac] Virus alert


John Droggitis(johnd[at]cybernex.net)
Tue, 21 Sep 1999 09:50:25 +0000


"Michael H. Martel" wrote:

> Now since MS wants Outlook to support HTML,they used the same engine as IE,
> and that includes JScript. SO if a message comes in that contains embedded
> JScript, it is executed immediately! That's what happened to my wife. The
> message contained embedded JScript to make the computer beep and start
> opening windows.
>
> I'm trying to track down a reference that tells me what JScript is capeable
> of. If I had to guess, I'd bet that it could delete files at the very
> least.
>

If JScript has similar security as javascript (what m$ ripped, um, modelled
jscript after), then it doesn't have any access to the filesystem. But there
are probably exploits to get around that. Now, activeX controls, which can
also be embedded in email, are a different story. These can cause a lot more
damage.

--John

* Windows-MacOS Cooperation List *



This archive was generated by hypermail 2.0b2 on Tue Sep 21 1999 - 06:55:05 PDT