POP3: .MSP

This signature detects e-mail attachments with the extension .msp received through POP3. This can indicate an incoming e-mail virus. .MSPs (Microsoft Windows Installer Patch) contain executable code. Attackers can create malicious executables, tricking the user into executing the file and infecting the system.

Extended Description

The impact on the target system is dependent on the instructions contained in the malicious .msp file.

Short Name
POP3:EXT:DOT-MSP
Severity
Minor
Recommended
False
Recommended Action
None
Category
POP3
Keywords
.MSP
Release Date
07/28/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown

Found a potential security threat?