[Groop] downloading e-groo

[chris.emmett at hsbcib.com]

Hi Groop
A jpg image, for instance, has a structure definition that allows for
picture sections, info sections and other user defined sections all linked
from a header table (IIRC) so you can place malicious code in the "other"
section. Normally this would do nothing because your image viewer ignores
it. However, some applications see these pieces of code and try to
interpret them i.e. execute them. I think that IE had this problem a while
back. As so often is the case, the virus requires help from a user or an
over-helpful application in order to execute.
(I'm sure there must be a serious technical write up of this somewhere but
I don't have it :-)

Womble
(Who once worked on a jpg conversion app)




************************************************************
HSBC Bank plc may be solicited in the course of its placement efforts for a
new issue, by investment clients of the firm for whom the Bank as a firm
already provides other services. It may equally decide to allocate to its
own proprietary book or with an associate of HSBC Group. This represents a
potential conflict of interest. HSBC Bank plc has internal arrangements
designed to ensure that the firm would give unbiased and full advice to the
corporate finance client about the valuation and pricing of the offering as
well as internal systems, controls and procedures to identify and manage
conflicts of interest.

HSBC Bank plc
Registered Office: 8 Canada Square, London E14 5HQ, United Kingdom
Registered in England - Number 14259
Authorised and regulated by the Financial Services Authority.
************************************************************

-----------------------------------------
SAVE PAPER - THINK BEFORE YOU PRINT!

This transmission has been issued by a member of the HSBC Group
"HSBC" for the information of the addressee only and should not be
reproduced and/or distributed to any other person. Each page
attached hereto must be read in conjunction with any disclaimer
which forms part of it. Unless otherwise stated, this transmission
is neither an offer nor the solicitation of an offer to sell or
purchase any investment. Its contents are based on information
obtained from sources believed to be reliable but HSBC makes no
representation and accepts no responsibility or liability as to its
completeness or accuracy.