In this form, all names recorded in contacts in Russian will be displayed, i.e. Instead of Cyrillic letters, there is a sequence of characters like = D0 = BA = D0 = BE = D0 = BC = D0 = B8 = D1 = 81 = D1 = 81 = D0 = B0 = D1 = 80. īut as we can see, we have a small problem. If you wish, you can familiarize yourself with them on the page. These are just the main attributes of any contact, we will not give a complete list of them. Inside are attributes, for example N- structured presentation of the first name (last name, first name, patronymic separated by semicolons), FN- name in a single line, CELL – cellular telephone. ![]() The details of each contact are presented as a text block starting with BEGIN: VCARD and ending END: VCARD. In the photo below we see what we have done. Open the program and just drag the file onto it. Let's try to open a file with it contact.vcf, into which we uploaded contacts from an Android phone. The Notepad application available on any Windows computer is quite suitable for reading files with the VCF extension. What programs are better to use for these purposes? Let's figure it out. The ability to open a VCF contact file and make changes to it is often useful in cases where you need to change some data or combine several address books into one. Since the information in a VCF file is stored in a text format, you can use ordinary text editors to view and edit it, including those installed on a stationary computer or laptop. That is, it is a kind of catalog of electronic business cards of people. In addition to the name and phone number, VCF records can contain other data of subscribers, for example, address, photo, e-mail, date of birth and a lot of other parameters. When unloaded, contact information is saved in text format vCard in a file with the VCF extension. Often, when transferring contacts from one smartphone to another, users choose such a method as exporting the phone book to a special file and then importing data from it on the end device. What else can you open files with the VCF extension on your computer. In any case, contacts will not be lost anymore. In the future, contacts can be transferred to your other devices: tablets, mobile phones. Thus, you will have at your disposal a backup copy of the address book. To do this, you need to log into your account and import the file from your computer. VCF files are used by Outlook from the software package, have a Russian-language interface and advanced help.Ī very convenient online service for working with VCF files is offered by Google. To open the VCF file on your computer, you can use the standard Windows Contacts program. The purpose of the VCF file is to save and exchange the user's address book. The vCard contains: first name, last name, address, email, birthday, video files, etc. vCard was developed a long time ago, in the nineties of the last century. ![]() Still, the PoC exploit requires the malicious executable to be previously downloaded by the user (or automatically downloaded via a drive-by download), so exploitation is not as straightforward as “get the VCF file to the user, wait for them to follow the link.Files with the VCF extension are vCard electronic business card files. ![]() ![]() Granted, the vulnerability can’t be exploited remotely without user interaction, but users often don’t think twice about following links (whether they look safe or not). The company apparently first said it would be fixing the flaw in an upcoming Windows version, then decided against it. Page has disclosed the vulnerability to Microsoft via the Trend Micro Zero Day Initiative. Here’s a video demonstration of the exploit: Page also provided a Proof-of-Concept exploit for the flaw, in which he named the dangerous executable file with a name that, at first glance, looks like a regular web address ( He then created a malicious VCF file with an URL pointing to the malicious executable.Ī victim clicking on the provided “website” link will trigger the execution of the executable, and Windows will not warn about the danger. The way Windows processes VCF files allows attackers to insert a dangerous hyperlink into the file, while being sure that the vulnerable OS won’t show a warning when the target tries to follow it. They are often used to quickly share contact information with interested parties, as they can be sent via email or message. They can contain the contact’s name, address, email address, phone number, their business or personal web page, etc. VCF is a standard file format used for storing contact information for individuals and businesses. vcf) can be exploited by remote attackers to achieve execute arbitrary code on vulnerable systems, security researcher John Page has shared. A vulnerability that exists in the way Windows processes VCard files (.
0 Comments
Leave a Reply. |