Sunday, 28 April 2019

email - Are .eml attachments a security risk?


My email service provider blocks mails with attached .eml files, apparently for security reasons, with the result that I loose relevant mails.


I have tried to find a description of the current security risk of forwarding mails with .eml files attached, but I could only find posts about 10 years old about vulnerability in Outlook.


What are the current risk of mails with .eml attachments, and is blocking by an email service provided still relevant ?



Answer



What are the current risk of mails with .eml attachments ?


Risks described in this post are still the risks with mails with .eml attachments because of old IFrame exploits, MIME exploits and viruses like Nimda



In some email clients, such as Microsoft Outlook, .eml files can trigger active scripting that can be used to launch virus activity. Furthermore, other executable file types can be wrapped in .eml files in order to bypass other virus checking scans. Therefore, many ISPs and email servers block the .eml file type.



Is blocking by email service provider still relevant ?


This is debatable topic.


But if service provider wants to take the ownership of filtering emails for you, they must provide you with a quarantine zone where you can check what emails are blocked and if you want them to be delivered or not


No comments:

Post a Comment

How can I VLOOKUP in multiple Excel documents?

I am trying to VLOOKUP reference data with around 400 seperate Excel files. Is it possible to do this in a quick way rather than doing it m...