3 ms·
I didn't say anything about that. I'm only refuting the claim that Windows email clients will run an executable just by clicking on them.
by skrebbel 7y ago
I didn't say anything about that. I'm only refuting the claim that Windows email clients will run an executable just by clicking on them.
- jorangreef 7y agoWell, then I would disagree with you there. There are plenty of ways to get Windows to run executable code just by clicking an attachment, and this even without warning dialogs: - PDFs with JS code. It's not a joke, someone actually titled a paper on PDF exploits alone, "PDF, Let Me Count the Ways". - Hostile RTFs (with or without OLEs) disguised as Word documents (which Office will gladly open). - Hostile HTML disguised as Excel spreadsheets (likewise). - New unknown variants of the old Windows metafile exploit (just by viewing, as xorcist suggested). - Image "stegosploits" (likewise). The list goes on...