Kevin Spicer wrote: > > they have to follow each other fffe denotes the start of a jpeg comment > field and the following two bytes indicate its length. The exploit is > to specify a length of zero or one byte. Inside a jpeg file the > sequence fffe _always_ indicates the start of a comment, therefore any > jpeg file containing the sequence fffe0000 of fffe0001 is attempting the > exploit. >
Thanks for claryfing that for me, Kevin. Cheers, Matt ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
