From: "Geo." 

Hmm.. could you fire up IE to go get the media player file from an email
(extending the process ).

Geo.

"Rich"  wrote in message news:3e342f8f$1{at}w3.nls.net...
   Couldn't be email as you can't play an ASF file with the background sound
tags.  If you could then there would be an issue.  There isn't though.

Rich

  "Geo."  wrote in message
news:3e3419e4$1{at}w3.nls.net...

  "Rich"  wrote in message news:3e335e3e{at}w3.nls.net...
  >   The process starts with the user opening a web page just as the report
  you posted claims.

  Ok, granted the exploit is described as requiring someone to go to a web
  page first but since (imo) it's being kicked off by playing a media file
it
  could just as easily have been an email (using the technique I used in
this
  group to autoplay midi files). There is no requirement to have the user do
  anything with IE, it can be done with OE reading email or news as well.

  I'll reply in a new thread to another piece of your post that I would like
  to discuss further. I'm going to separate it from this thread in an
attempt
  to untie the issue from what we are discussing here.

  Geo.

--- BBBS/NT v4.01 Flag-4