Slo-techova ikona nevarna?

Vedno, ko obiščem stran www.slo-tech.com, mi "Proventia Desktop" izpiše HIGH RISK opozorilo:

[Unauthorized Access Attempt] This signature detects when you visit a Web site that provides a "favorites icon" that has a suspicious format. This includes an icon that contains a large number of images or an icon with one or more overlapping images. These icons can overflow a buffer in some older browsers allowing the server to take control of the client.

Poleg tega pa tudi:

[Suspicious Activity] This signature parses Windows Icon image files and triggers when any field deviates from specification.

Pri skoraj nobenih drugih straneh tega nisem opazil.


Kaj se dogaja pri vas?

v ie ne prikaze ker nima definiranga favicona v headu...drugace pa opera in ff sta "pametna" in pogledata ce datoteka obstaja in jo avtomaticno prikaze. ne vidim pa razloga zakaj bi bila nevarna ikona^^

Zakaj pa bi se virusi 2x inštailrali?

Favicon

Zgleda, da je problem v tipu (type) ali pa nepravilen MIME identifier od serverja:

Primer

<link rel="shortcut icon" href="http://example.com/favicon.ico" type="image/vnd.microsoft.icon"> 
<link rel="icon" href="http://example.com/favicon.ico" type="image/vnd.microsoft.icon">

GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Language: sl
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 30 May 2003 15:42:24 GMT
If-None-Match: [DELETED]
User-Agent: [DELETED]
Host: slo-tech.com
Connection: Keep-Alive
Cookie: [DELETED]

Ker gre za ico :
ICO files image/vnd.microsoft.icon (Alternatively, image/x-icon can be used instead, for compatibility reasons. However, it is preferable to use the IANA-registered MIME type, as most major browsers now support it.)

Torej ker gre za image/x-icon (vsaj tako IE prepozna ta tip, čeprav ni določena iz server strani) ne vem v čem bi bil problem, sama *.ico datoteka pa tudi upam brez "čudne kode".