Reply to thread

Message

<blockquote data-quote="fforde" data-source="post: 544182" data-attributes="member: 52082">Well according to the VirusTotal PDF you linked, this is a buffer overrun exploit from 2004. But I am trying to reproduce the issue by setting up the same movies on my test system using the same data providers, but all images that are downloaded for me are clean according to VirusTotal. I am not really sure what to do. If we could identify a malicious image on a web server we pull from, then we could alert the site owner. Moving Pictures also sometimes converts an image file to JPG format depending on the source, so I suppose it's possible that the Windows GDI library we use is creating in some cases malformed files. Can you provide <a href="http://en.moving-pictures.tv/wiki/FAQ#How_do_I_generate_useful_log_files.3F" target="_blank">debug log files</a> from when one of these image files is downloaded? To generate such files you'd have to try to recreate the same situation that caused the image files to be grabbed in the first place.</blockquote>

[QUOTE="fforde, post: 544182, member: 52082"] Well according to the VirusTotal PDF you linked, this is a buffer overrun exploit from 2004. But I am trying to reproduce the issue by setting up the same movies on my test system using the same data providers, but all images that are downloaded for me are clean according to VirusTotal. I am not really sure what to do. If we could identify a malicious image on a web server we pull from, then we could alert the site owner. Moving Pictures also sometimes converts an image file to JPG format depending on the source, so I suppose it's possible that the Windows GDI library we use is creating in some cases malformed files. Can you provide [URL="http://en.moving-pictures.tv/wiki/FAQ#How_do_I_generate_useful_log_files.3F"]debug log files[/URL] from when one of these image files is downloaded? To generate such files you'd have to try to recreate the same situation that caused the image files to be grabbed in the first place. [/QUOTE]

Verification