[Fwd: load Trojan thru Clipart!]

[Gary Stoneburner <stoneburner@nist.gov>]

-------- Original Message --------
Subject: load Trojan thru Clipart!
From: Gary Stoneburner <gary.stoneburner@nist.gov>
To: sec-info

re: http://www.l0pht.com/advisories/ms-clipart.txt

This is really cool.  Imagine loading malicious code through a piece of
clip art!

"ClipArt Gallery (CAG.EXE) that comes with Microsoft Office 2000
processes ".CIL" files for installation of clipart from the Internet.
The
CIL format is not handled properly by CAG.EXE and one of the internal
fields
in the file presents a buffer overflow condition, allowing arbitrary
code to
be executed by an attacker."

Cheers,
Gary

PS - Thanks to Ken Frazier at Boeing for this reference.

S/MIME Cryptographic Signature