112567 - Mozilla saved "badtrans" virus to temporary file

Status: VERIFIED DUPLICATE of bug 109249

(MailNews Core :: Backend, defect)

Description

[[e-mail]]

I was sent a copy of the badtrans virus today.
When I read the message in Mozilla, my anti-virus software alerted me.
It is unacceptable for Mozilla to save the virus to disk, however briefly.

Comment 1

[Laurens Schrijnemakers]

Moz does this on my win2k box, too. Build 20011126 . 
It does not try to save for all badtrans viruses though; on some it will crash.
I suppose this has something to do with the (changing) mime info & filename info
contained in message source. In this case: 
Content-Type: audio/x-wav;
	 name="SEARCHURL.MP3.pif"
I can make an attachment of a larger part of the message *if that's ok*
It seems to save a temporary copy to (according to McAfee antivirus)
c:\documents and settings\<username>\local
settings\temp\tvyg4f4s.exe\tvyg4f4s.exe although tvyg4f4s.exe\tvyg4f4s.exe does
not exist, only tvyg4f4s.exe (my virus scanner cannot acces the file due to
this, strange stuff)
Moz then automatically prompts me to save the file to <previous download
dir>\fetch\UID\.INBOX>10534
Very disturbing, this.

Comment 2

[Boris Zbarsky [:bzbarsky]]

*** This bug has been marked as a duplicate of 109249 ***

Comment 3

[[e-mail]]

vrfy