Malicious Intent...technically possible?

Is this technically possible assuming the required skills are in
place?

Say I'm familiar with the contents of your SCO OSR507 MP3 system and
there's data on your system I want to get but I don't want you to know
I've got it. So, I hatch a malicious plan.

I give you a CD-R that contains software that you agree to install.
You are to return the CD back to me when you are finished with it.

You mount the CD on your OSR507 MP3 box and run an included install
script. However, unknown to you, there was other software installed
the system that gathers the data I seek and writes it back to an
unused section of the CD-R.

I'm hearing that under certain conditions it may be possible to do
that write-back to a CD-R.

I'm not so sure and I'd like to hear your technical opinions on that
matter regarding OSR507/MP3.

Thanks,

DDinAZ
.

Quantcast