From owner-freebsd-chat Wed Nov 10 15:27:33 1999 Delivered-To: freebsd-chat@freebsd.org Received: from lariat.lariat.org (lariat.lariat.org [206.100.185.2]) by hub.freebsd.org (Postfix) with ESMTP id 3BADB14D48 for ; Wed, 10 Nov 1999 15:27:27 -0800 (PST) (envelope-from brett@lariat.org) Received: from mustang (IDENT:ppp0.lariat.org@lariat.lariat.org [206.100.185.2]) by lariat.lariat.org (8.9.3/8.9.3) with ESMTP id QAA10569; Wed, 10 Nov 1999 16:26:55 -0700 (MST) Message-Id: <4.2.0.58.19991110162243.04435ba0@localhost> X-Sender: brett@localhost X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Wed, 10 Nov 1999 16:27:04 -0700 To: Greg Lehey , Jonathan Chen , freebsd-chat@FreeBSD.ORG From: Brett Glass Subject: Re: "Good times" `virus' now a real possibility... In-Reply-To: <19991110153657.22447@mojave.sitaranetworks.com> References: <19991111091605.A28643@jonc.logisticsoftware.co.nz> <19991111091605.A28643@jonc.logisticsoftware.co.nz> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org BubbleBoy works via a VBScript/ActiveX hole. Interpretation of the HTML runs the script, which in turn causes an ActiveX control (which should not be privileged to run but is) to run amok on the system. Unfortunately, any mail program that uses IE to render HTML is probably vulnerable. This includes Outlook, Outlook Express, and probably Eudora (unless you've forced Eudora not to use IE to render HTML). Netscape Communicator is buggy and crashes a lot, but at least does not have this hole. --Brett At 03:36 PM 11/10/1999 -0500, Greg Lehey wrote: >On Thursday, 11 November 1999 at 9:16:05 +1300, Jonathan Chen wrote: > > Check out: > > > > http://www.cnn.com/TECH/computing/9911/09/seinfeld.virus.ap/index.html > > > > Looks like the "Good Times" virus is now a definite possiblity, thanks > > to Microsoft. > >Right, I heard that on the news this morning. Does anybody know how >it works? Does anybody have one they can send me? > >Greg >-- >Finger grog@lemis.com for PGP public key >See complete headers for address and phone numbers > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-chat" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message