Marius van Oers McAfee Avert Network Associates
Popular peer to peer transfer files like .MP3, .ASF and .JPG files are until now exempt from native malware. What so far happened is that the file content as such is of a complete different filetype so it just has a deceiving file extension to trick the user.
But this doesn't mean that media files are always guaranteed to be safe. Windows media files like .ASF (Advanced Systems Format) files can contain audio and video data but it can also contain other Binary files and it supports Scripting. This might become a possible new threat area in the future.
This paper will mainly focus on the .ASF file structure and the possible security issues related to that.