Can avi files be malware?

can they execute malicious code?

 

Please, can I get some honest opinions here? Feel free to add to the thread. This is a serious issue. I'm not referring to extended file extensions like avi.vbs or avi.exe. Real video files that can actually harm your computer. Please, I would really like some input on this subject.

 

Well the answer to the question is yes - by an overflow attack that allows the AVI to execute remote code. But it looks as though the risk only applies to people using outdated software and OSes. There are most likely, however, more vulnerabilities undiscovered at this point.

Sources:
MS Security Bulletin

Symantec

eEye Digital Security (the company of Fang Xing, who discovered the vulnerability)

 

Oh, I should have known. Thanks. Will you move this topic for me? Perhaps into General Discussion - and delete this last few posts?

/Josh

 

Removed

 

Removed