"This vulnerability occurs when it appears as though a MIME segment is
occurring after the end of the MIME body (specifically, a MIME segment with
a boundary other than the one specified appears in the MIME postamble). 

Outlook may see this as an attachment. 

Although technically valid, there is no legitimate reason for an E-mail to
be sent like this".

 

In other words, it's a flaw in Outlook how it handles the case when a MIME
segment is not terminated with the same string as in the postamble. A virus
scanner might decode the MIME structure correctly - while Outlook will treat
this as a separate attachment.

 

This allows a potential virus author to sneak a "hidden" attachment to
Outlook, past any well-behaved virus scanner.

 

So you're currently blocking (likely valid) emails, because they are
formatted in a way that COULD be used by someone to send a virus.

 

From: [email protected] [mailto:[email protected]]
On Behalf Of Scott Fosseen - Prairie Lakes AEA
Sent: Monday, August 24, 2015 2:51 PM
To: [email protected]
Subject: [MBF] Outlook Virus

 

Declude Virus v4.12.05 caught the [Outlook 'MIME segment in MIME Postamble'
Vulnerability] virus in [No attachment]

from [email protected]
<mailto:[email protected]>  to:
usermailto:[email protected].

 

I am getting this error from this specific domain.  Any suggestions.

Reply via email to