 |
 |
 |
Deceptive file names under Vista
Monday, October 1st, 2007
The falsified display of the filename is due to the inclusion of Unicode control characters that change the direction of writing. These are required for the Arabic-speaking region, for example, where writing runs from right to left. Unicode recognizes the control characters (PDF) right-to-left override (RLO, 202E) and left-to-right override (LRO, 202D) to switch the writing direction.
Under Windows Vista, and possibly other operating systems too, these special characters are permitted in filenames; not so under Windows XP. Attackers can fool Vista users by concealing harmful executable code with these characters. The usual tips on guarding against mischievous attacks, such as not to run executable E-mail attachments, are of no assistance. heise Security - News - Deceptive file names under Vista
Popular Posts
Please read our Disclaimer
