stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


Decompression bombs: email attachments expanded and expanded and expanded







Decompression bombs: email attachments
expanded and expanded and expanded

Decompression bombs: email attachments
expanded and expanded and expanded
02/11/2004 06:56 PM

Here's an interesting security noodle from Yoz Grahame: some (meaningless) data is highly compressible using standard compression algorithms -- what would it do your computer if the payloads in automatically decompressed messages went from 7kb to 100gb?

Here's an example scenario: A mail arrives at your super-barbed-wire-protected mail gateway. The gzip-compressed attachment - only 7k big - is grabbed by the anti-virus scanner, looking for any suspicious signatures. It starts to decompress it and BANG - the resulting file, over 100 gigabytes, crashes the AV scanner and completely fills the hard drive partition in the process.

Fortunately, a good number of the AV scanners that AERAsec tested aren't too vulnerable, but some require patching. Similarly, sending a gzipped-HTML bomb to a browser will crash a fair few of them. Not so scary, then, but nifty in an admirably-nasty way.

Link




This is a GrokNews Entry: (what is grok?)





Similar Items

Decompression bombs: email attachments expanded and expanded and expanded

Grok Headline matches for Decompression bombs: email attachments expanded and expanded and expanded

US Says It Is Considering Expanded Mad
Cow Testing


US Says It Is Considering Expanded Mad
Cow Testing
12/29/2003 10:32 PM
Reuters via Wired News Dec 29 2003 9:39PM ET

Another Expanded Whois Service


Another Expanded Whois Service 08/12/2004 11:04 AM
Source: SearchDay - Doing in-depth investigation of a web site? Whois.sc offers a wealth of detail about the people and technology behind just about any web site on the planet....

PATRIOT Act Quietly Expanded


PATRIOT Act Quietly Expanded 12/02/2003 12:56 AM
From the linked article: Congress approved a bill on Friday that expands the reach of the Patriot Act, reduces oversight of the FBI and intelligence agencies and, according to critics shifts the balance of power away from the legislature and the courts. A provision of an intelligence spending bill will expand the power of the FBI to subpoena business documents and transactions from a broader range of business -- everything from libraries to travel agencies to eBay -- without first seeking approval from a judge.

Erbitux Has Expanded Potential


Erbitux Has Expanded Potential 06/05/2004 08:43 AM
TheStreet.com Jun 5 2004 1:17PM GMT

Yahoo Labs Get Expanded R&D


Yahoo Labs Get Expanded R&D 04/13/2005 11:11 AM
"Yahoo! Inc. is expanding its research labs to develop new features and attract customers as it battles Google Inc., the company's main competitor."

24-7 INtouch Launches Expanded Line of
Live Online Support Services: Live Web
Chat, Web Push, Online Callback Request,
and Real time Email Response


24-7 INtouch Launches Expanded Line of
Live Online Support Services: Live Web
Chat, Web Push, Online Callback Request,
and Real time Email Response
08/30/2004 03:15 AM
24-7 INtouch, an award winning call center outsourcing company, is now offering clients online support services such as Live Web Chat, Web Push, Online Callback Request, and Real time Email Response. The company is partnering with InstantService to offer real-time, web based communication solutions to help our clients increase sales, lower costs, and raise customer service levels. [PRWEB Aug 30, 2004]

Google Ad Policies To Be Expanded
Publicly


Google Ad Policies To Be Expanded
Publicly
09/22/2004 06:28 AM
Searchenginewatch.com - Wed Sep 22, 11:01 am GMT

Bio-IT World features expanded workshops


Bio-IT World features expanded workshops 03/23/2005 12:31 PM
IDG World Expo on Wednesday announced an expanded schedule and topics for the workshops planned for its upcoming Bio-IT World Conference + Expo, returning to Boston from May 17 - 19, 2005 at the Hynes Convention Center. The event is expected to draw life sciences professionals, academics, government employees and others -- an exhibit hall area will include vendors of software and hardware products catering to life sciences including Apple.

Tammy Says Talk Show Expanded


Tammy Says Talk Show Expanded 06/23/2004 03:08 AM
African American Business Radio Show to move to a 2-hr time slot on Business America starting July 5th. [PRWEB Jun 23, 2004]

eBuilding 1.4 Released With Expanded
Capabilities


eBuilding 1.4 Released With Expanded
Capabilities
06/23/2004 03:08 AM
[PRWEB Jun 23, 2004]

Folk Process defined and expanded upon


Folk Process defined and expanded upon 07/29/2004 05:05 AM
Hot on the heels of the attack on Woody Guthrie's memory (in the form of a lawsuit against political parodists who used his "This Land is Your Land" as part of a Flash movie) is this wonderful piece on what Pete Seeger called "the folk process" -- the way that traditional art has been made by ripping, mixing and burning the art that preceded it.
Guthrie may be right that Pete Seeger was the first to coin the term "folk process", but the process of oral song-transmission through through variation and selection was being analyzed even before Pete Seeger's birth in 1919. And the process itself has been operating as long as there have been songs. The folk process was described, though not so named, by Cecil Sharp in 1907: "[Development of a folk song] involves the three principles of continuity, variation, and selection."
Link

Expanded Copyright Law Proposed
(washingtonpost.com)


Expanded Copyright Law Proposed
(washingtonpost.com)
06/23/2004 10:28 PM
washingtonpost.com - Top Senate leaders from both parties launched an assault on online music and video file-sharing services yesterday, introducing legislation that makes anyone who "induces" illegal copying just as liable for breaking copyright law as someone who makes the copies.

New Website To Offer Expanded Web Design
Services


New Website To Offer Expanded Web Design
Services
06/02/2004 02:32 AM
Vermillien Multimedia announces the launch of their new website, http://www.vermillien-web-design.com. This new site will offer web design services and web site maintenance packages. The new web site includes a portfolio of their latest projects, developers forums, link exchange area and ability to submit articles and downloads for registered users. [PRWEB Jun 2, 2004]

4D WebSTAR V gets expanded anti-spam
features


4D WebSTAR V gets expanded anti-spam
features
07/08/2004 12:31 PM
4D, Inc. today announced the release of 4D WebSTAR V v5.3.3, a free update to its 4D WebSTAR Server Suite...

PhotoshopWorld's Adobe ACE Boot Camp
expanded


PhotoshopWorld's Adobe ACE Boot Camp
expanded
02/18/2004 12:10 PM
The National Association of Photoshop Professionals (NAPP) announced today that the previously sold-out Adobe ACE Boot Camp, a workshop for creative professionals interested in certification from Adobe, is being expanded and the venue size doubled...

Mail Factory gets expanded address
support, more


Mail Factory gets expanded address
support, more
09/08/2004 10:39 AM
BeLight Software has released Mail Factory 1.3, a new version of its program to design and print envelopes, address and shipping labels...

Service tax net expanded: People across
the board will have to pay more for air
travel,


Service tax net expanded: People across
the board will have to pay more for air
travel,
07/08/2004 06:54 AM
NDTV Jul 8 2004 10:53AM GMT

Dell sees billions in expanded SAP deal


Dell sees billions in expanded SAP deal 04/28/2004 02:44 PM
CNET Apr 28 2004 6:47PM GMT

Skilled-worker visa program to be
expanded


Skilled-worker visa program to be
expanded
04/05/2005 09:23 PM
San Jose Mercury News Apr 6 2005 12:14AM GMT

SupportSoft stock jumps on expanded pact
with BellSouth


SupportSoft stock jumps on expanded pact
with BellSouth
06/17/2004 07:45 PM
SiliconValley.com Jun 17 2004 10:44PM GMT

Intel expanded Pentium M and Celeron M
processor families


Intel expanded Pentium M and Celeron M
processor families
07/21/2004 09:15 AM
ECE Jul 21 2004 1:10PM GMT

Seismosurfing the Internet for
Earthquake Data - Expanded Version


Seismosurfing the Internet for
Earthquake Data - Expanded Version
01/06/2005 09:56 AM
Seismosurfing the Internet for Earthquake Data - Expanded Version
http://www .geophys.washington.edu/seismosurfing.html

Web connections to original seismic data or seismic research information. Extremely comprehensive resource for seismic data and research covering the following areas: 1) Global. 2) California, 3) Alaska & PNW, 4) Inter-mountain US, 5) Eastern US, 6) Americas, 7) Europe, 8) Africa, Asia & Oceania, 9) Volcanos, and 10) Others.

Verizon to launch expanded business
network services


Verizon to launch expanded business
network services
04/15/2004 07:42 AM
Computer Weekly Apr 15 2004 12:05PM GMT

List of Detainee Death Inquiries
Expanded to 37 (Los Angeles Times)


List of Detainee Death Inquiries
Expanded to 37 (Los Angeles Times)
05/22/2004 05:19 AM
Los Angeles Times - WASHINGTON — Pentagon officials on Friday increased to 37 the number of detainee deaths in Iraq and Afghanistan that have prompted investigations, including at least eight unresolved homicides that may have involved assaults before or during interrogation.

New Intel Proposals Seek Expanded Powers
For Ashcroft, Rumsfeld


New Intel Proposals Seek Expanded Powers
For Ashcroft, Rumsfeld
09/24/2004 09:16 AM
Washington Post Sep 24 2004 1:43PM GMT

FBI seeks expanded search powers -
Terrorism & Security - MSNBC.com


FBI seeks expanded search powers -
Terrorism & Security - MSNBC.com
04/07/2005 03:22 AM
FBI seeks expanded search powers - Justice Dept. also wants expiring Patriot Act provisions renewed

msnbc.msn.com/id/7388717
track this site | 3 links


Actual Title Buttons 2.5: Expanded
interface capabilities for a window!


Actual Title Buttons 2.5: Expanded
interface capabilities for a window!
11/03/2003 07:45 AM

Apple makes do with smaller expanded
Maine iBook program


Apple makes do with smaller expanded
Maine iBook program
08/09/2004 07:55 AM
Apple Computer Inc. has agreed to a smaller number of iBooks than it originally proposed for an expansion of its iBook program to Maine public high schools, according to the Associate d Press. The company has a program in place that puts iBooks into the hands of all middle schoolers in the state, and it now looks like about one-third of high schools will get them as well.

Ellipsis Biotherapeutics Corporation
Offers Expanded SNP Genotyping Services


Ellipsis Biotherapeutics Corporation
Offers Expanded SNP Genotyping Services
06/05/2005 11:58 PM
Ellipsis Biotherapeutics Corporation announced today that it now offers SNP genotyping using both Illumina and Beckman Coulter technologies. [PRWEB May 28, 2005]

ShoreGroup Launches Expanded Contact
Center Consulting Practice


ShoreGroup Launches Expanded Contact
Center Consulting Practice
07/28/2004 02:41 AM
ShoreGroup Inc., a premier converged network professional services, operational support services and systems management solutions firm, today launched an expanded contact center technology consulting practice. [PRWEB Jul 28, 2004]

MicroTek Opens Expanded Computer
Classroom Rental Facility in Chicago


MicroTek Opens Expanded Computer
Classroom Rental Facility in Chicago
02/01/2005 09:27 PM
MicroTek announces the opening of a new Downtown Chicago computer classroom rental facility. The location offers 3 more classrooms than the previous along with improved student amenities. [PRWEB Jan 28, 2005]

POTF2 Photo Archives Update: Expanded
Universe - Heir To The Empire


POTF2 Photo Archives Update: Expanded
Universe - Heir To The Empire
06/10/2004 01:33 AM
It was a time when Star Wars was long forgotten. The movies had ended, the comics were cancelled, no toys on the shelves. Then in 1991, a new novel came out that changed all that. Heir to the Empire was an instant hit with readers and sparked Star Wars interest for a new generation. A comic book adaptation was published, and the character designs were used for the figures in today's Power of the Force 2 Photo Archives, which debuts a new sub-section dedicated to the Expanded Universe featuring a Spacetrooper, Grand Admiral Thrawn, and the hugely-popular Mara Jade.

POTF2 Photo Archives Update: Expanded
Universe - Dark Empire


POTF2 Photo Archives Update: Expanded
Universe - Dark Empire
06/11/2004 01:29 AM
Today's Power of the Force 2 Photo Archives update features another series from the Expanded Universe that helped fan the flame of fandom for a new generation. Dark Horse Comics' Dark Empire series featured new exploits of the classic Star Wars characters such as Princess Leia and Luke Skywalker fighting against a threat from the past, the Clone Emperor Palpatine and his forces. Palpatine's bodyguard, the Imperial Sentinel, was at one point considered to be part of a new Vintage line of toys as a new villain with an army of clone warriors.

Cendant taps IBM eServer systems, Linux
for expanded airfare system


Cendant taps IBM eServer systems, Linux
for expanded airfare system
05/06/2004 11:19 PM
Switching from Sun's Unix-based system to IBM's eServer systems will reduce IT costs by 90% over three years, Cendant said.

IEEE task force settles on expanded
Ethernet frame size


IEEE task force settles on expanded
Ethernet frame size
03/24/2005 05:13 AM
The IEEE task force weighing whether and how to expand the size of Ethernet frames met again last week and made a couple of key decisions.

Microsoft Announces Expanded Access To
Extensive Intellectual Property
Portfolio


Microsoft Announces Expanded Access To
Extensive Intellectual Property
Portfolio
12/03/2003 01:21 PM
Microsoft Corp. today announced an expanded intellectual property (IP) policy to provide the IT industry with increased access to Microsoft's growing IP portfolio. Based on broad consultation with others in the industry, the IP policy streamlines Microsoft® licensing programs to provide broader availability to Microsoft's IP portfolio, furthering interoperability with other technologies and reinforcing the company's commitment to innovation. The policy also broadens Microsoft's commitment to provide the academic community with IP under royalty-free terms for noncommercial use. The policy was announced in conjunction with two new IP licensing programs: one for ClearType® technology and the other for Microsoft's File Allocation Table (FAT) file system.

POTF2 Photo Archives Update: Expanded
Universe - Art Of Star Wars


POTF2 Photo Archives Update: Expanded
Universe - Art Of Star Wars
06/13/2004 01:11 AM
Today's Power of the Force 2 Photo Archives update features a trio of vehicles inspired by the illustrations found in the Art of Star Wars and Return of the Jedi Sketchbook by Ralph McQuarrie and Joe Johnston. While these designs were not used in the film, the Airspeeder, Cloud Car, and Speeder Bike (and their exclusive pilots) were the first items to feature the Expanded Universe logo.

POTF2 Photo Archives Update: Expanded
Universe - Dark Forces


POTF2 Photo Archives Update: Expanded
Universe - Dark Forces
06/12/2004 06:15 AM
Today's Power of the Force 2 Photo Archives update takes aim at characters from the Dark Forces video game. This Expanded Universe series was adapted into a series of hardcover comics, and the first adventure revealed that it was mercenary Kyle Katarn who captured the stolen plans for the Death Star. His next mission for the Rebel Alliance pitted him against the threat of the Dark Trooper project.

New expanded course offerings announced
for Avid Xpress, and Final Cut Pro
training software packages.


New expanded course offerings announced
for Avid Xpress, and Final Cut Pro
training software packages.
09/23/2004 03:04 AM
GeniusDV LLC announced today the expansion of two popular video editing software training programs. These include new certified classes for Apple’s video Production Suite, Final Cut Pro, and Avid Xpress Pro software products. [PRWEB Sep 23, 2004]
Grok Description matches for Decompression bombs: email attachments expanded and expanded and expanded
GrokA matches for Decompression bombs: email attachments expanded and expanded and expanded

Decompression bombs: email attachments expanded and expanded and expanded

The following phrases have been identified by the grok system as matching this entry:

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

Google is Harder
Than it Looks ETCON
talk notes

Atkins was skinny
when he died

Notebooks make a
play as gamer
machines

Lycos restructures,
cuts U.S. staff

Sun CEO: Open source
is our friend

Norway's Opera does
duet with Motorola

Motorola Embraces
Opera Browser

Internet Explorer
and Microsoft
clipboard poor
security policy

Microsoft ASN flaw
may be biggest
defect ever found

Other News: Comcast
Wants Disney

PeopleSoft: Justice
officials recommend
against Oracle
takeover

Comcast offers to
buy Disney for $66B

Offshore outsourcing
vendor Cognizant
sees 61.9% revenue
boost

Via takes Eden
processor to 1 GHz

French government to
test open-source on
the desktop

Juniper bid for
NetScreen shows
network security
premium

CSC wins $147M
contract extension
with British
retailer

H-1B visa cap could
be reached within a
week

PLEdit v5.7 Build
272

Calif. regulators
step up VoIP plans

Adware ploy dupes
IMers with bin Laden
'news'

A Gaudí City
XFree86
vulnerability
exploit

PC disposal: recycle
or build for
durability?

From Whitehall to
Zanzibar

Uni Slashes Desktop
Support Demands

Palm To Dump Mac
Support; Third Party
Software Will Be
Required For Syncing

New Adware Spams
Instant Messenger
Buddies

SiouX 0.2.7
Sodipodi 0.34
Polipo 0.8.99.3
(Unstable)

Virtual Universe
0.46 BRC2 (Client)

MaWaTT 2004-02-11
(Development)

MøB 0.54
AIM Sniff 0.9c
MLdonkey 2.5.11
GCJ web browser
plugin 0.1.1

xmlenc 0.41
Rio to fight sex
tourism as Carnival
nears (Reuters)

Typo Changes Ad to
'Brother for Sale'
(AP)

Oldest insect
delights experts

Boro stun Man United
Oracle bid for
PeopleSoft on the
ropes, not yet out
(AFP)

DVD-Copying Software
Creator Expands (AP)

Senators Push
Two-Year Internet
Tax Ban (Reuters)

Intel Silicon
Innovation Could
Eliminate Data Jams
(Reuters)

Bush Opens New
Effort to Halt
Spread of Nuclear
Weapons

Nokia posting to
TypePad via Atom API

Duke Conservative
Union

New York in the 70s
Gallery - The
Digital Journalist

what is grok?