Image_GIF_Netscape_S ubBlock_Co rrupt

[Carkbiy]

BlackIce RealSecure Protector has been throwing up a critical warning alert
when I view PROC forums lately. Anyone else getting this?

Image_GIF_Netscape_S ubBlock_Corrupt
This signature detects specially crafted GIF files which contain invalid
Netscape application extension subblocks. The invalid extensions may lead to
a buffer overflow and execution of arbitrary code

[Echoboy]

Originally Posted by Carkbiy

BlackIce RealSecure Protector has been throwing up a critical warning alert
when I view PROC forums lately. Anyone else getting this?

Image_GIF_Netscape_S ubBlock_Corrupt
This signature detects specially crafted GIF files which contain invalid
Netscape application extension subblocks. The invalid extensions may lead to
a buffer overflow and execution of arbitrary code

Is it malicious or is it something to do with the compression ??
Where did you see this ??

[i_didnt_do_nawtin]

GIF files have a very flexible format. It's probably something stupid like a zero length comment. I wouldn't worry about it.