{"id":31611,"date":"2019-10-31T21:42:10","date_gmt":"2019-10-31T18:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer\/"},"modified":"2019-10-31T21:42:10","modified_gmt":"2019-10-31T18:42:10","slug":"microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","title":{"rendered":"Microsoft har afvist at rette en nul-dags s\u00e5rbarhed i Internet Explorer","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Fredag den 12. april offentliggjorde informationssikkerhedsspecialisten John Page information om en ikke-patch 's\u00e5rbarhed' i den aktuelle version af Internet Explorer og demonstrerede dens udnyttelse. Denne s\u00e5rbarhed kan potentielt tillade, at en angriber f\u00e5r adgang til indholdet af lokale filer p\u00e5 Windows-systembrugeres enheder, omg\u00e5ende browserens sikkerhedssystem.<\/p>\n

\"Microsoft<\/p>\n

S\u00e5rbarheden ligger i den m\u00e5de, Internet Explorer h\u00e5ndterer filer i MHTML-format, som typisk har filendelsen .mht eller .mhtml. Dette format bruges som standard af Internet Explorer til at gemme websteder og tillader, at alt indhold p\u00e5 siden sammen med alt medieindhold gemmes som en enkelt fil. I \u00f8jeblikket gemmer de fleste moderne browsere ikke l\u00e6ngere websteder i MHT-format og anvender i stedet det standard webformat \u2014 HTML, men de underst\u00f8tter stadig behandling af filer i dette format og kan anvende det til at gemme ved de rette indstillinger eller ved hj\u00e6lp af udvidelser.<\/p>\n

Den s\u00e5rbarhed, som John opdagede, tilh\u00f8rer klassen af XXE (XML eXternal Entity) s\u00e5rbarheder og skyldes en forkert konfiguration af XML-kodebehandleren i Internet Explorer. \"Denne s\u00e5rbarhed giver en fjernangriber adgang til brugerens lokale filer og f.eks. kan udtr\u00e6kke information om versionen af den installerede software p\u00e5 systemet,\" forklarer Page. \"S\u00e5ledes vil en anmodning om 'c:Python27NEWS.txt' returnere versionen af dette program (Python-interpreteren i dette tilf\u00e6lde).\"<\/p>\n

<\/center><\/p>\n

Da alle MHT-filer i Windows som standard \u00e5bnes i Internet Explorer, er udnyttelsen af denne s\u00e5rbarhed en triviel opgave, da brugeren kun skal dobbeltklikke p\u00e5 en farlig fil, som han har modtaget via e-mail, p\u00e5 sociale medier eller i beskedapps.<\/p>\n

\"Microsoft<\/p>\n

\u00abSom vanligt, n\u00e5r man opretter en instans af en ActiveX-objekt som Microsoft.XMLHTTP, modtager brugeren en sikkerhedsadvarsel i Internet Explorer, der anmoder om bekr\u00e6ftelse for aktivering af blokeret indhold,\u00bb forklarer forskeren. \u00abMen n\u00e5r man \u00e5bner en forberedt .mht-fil ved hj\u00e6lp af specielt formaterede -tags, vil brugeren ikke f\u00e5 en advarsel om potentielt farligt indhold.\u00bb<\/p>\n

If\u00f8lge Page har han med succes testet s\u00e5rbarheden i den aktuelle version af Internet Explorer 11 med alle de nyeste sikkerhedsopdateringer i Windows 7, Windows 10 og Windows Server 2012 R2.<\/p>\n

Formentlig den eneste gode nyhed ved opdagelsen af denne s\u00e5rbarhed for offentligheden er, at den engang dominerende markedsandel for Internet Explorer nu er faldet til omkring 7,34 %, if\u00f8lge NetMarketShare. Men da Windows bruger Internet Explorer som standardprogram til at \u00e5bne MHT-filer, beh\u00f8ver brugerne ikke have IE som standardbrowser, og de forbliver s\u00e5rbare, s\u00e5 l\u00e6nge IE stadig er til stede i deres systemer, og de ikke er opm\u00e6rksomme p\u00e5 formatet af de filer, der downloades fra internettet.<\/p>\n

Den 27. marts informerede John Microsoft om denne s\u00e5rbarhed i deres browser, men den 10. april modtog forskeren et svar fra virksomheden, hvor de angav, at de ikke betragtede dette problem som kritisk.<\/p>\n

\u00abEn rettelse vil kun blive frigivet sammen med den n\u00e6ste version af produktet,\u00bb st\u00e5r der i Microsofts brev. \u00abI \u00f8jeblikket planl\u00e6gger vi ikke at udgive en l\u00f8sning p\u00e5 dette problem.\u00bb<\/p>\n

Efter Microsofts klare reaktion offentliggjorde forskeren oplysninger om nul-dags s\u00e5rbarheden p\u00e5 sin hjemmeside samt et demonstrativt kode og video p\u00e5 YouTube.<\/p>\n<\/p>\n

\r\n \"Afspil\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Selvom udnyttelsen af denne s\u00e5rbarhed ikke er s\u00e5 let og kr\u00e6ver, at brugeren p\u00e5 en eller anden m\u00e5de bliver tvunget til at \u00e5bne en ukendt MHT-fil, b\u00f8r denne s\u00e5rbarhed ikke tages let, p\u00e5 trods af Microsofts mangel p\u00e5 reaktion. Hackergrupper har tidligere brugt MHT-filer til phishing og distribution af malware; intet forhindrer dem i at g\u00f8re det igen i dag. <\/p>\n

For at undg\u00e5 denne og mange lignende s\u00e5rbarheder er det tilstr\u00e6kkeligt blot at v\u00e6re opm\u00e6rksom p\u00e5 filtypen p\u00e5 de filer, du modtager fra internettet, og at kontrollere dem med antivirussoftware eller p\u00e5 VirusTotal. For ekstra sikkerhed kan du indstille dine foretrukne browsere til at \u00e5bne filer med .mht eller .mhtml i stedet for Internet Explorer. For eksempel kan dette g\u00f8res ret nemt i Windows 10 under menupunktet \"V\u00e6lg standardapps for filtyper\".<\/p>\n

\"Microsoft<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Kilde: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043c\u0438\u043d\u0443\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a Internet Explorer \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 MHTML, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft har n\u00e6gtet at rette s\u00e5rbarheden med nul dage i Internet Explorer | ProHoster","description":"Fredag den 12. april offentliggjorde informationssikkerhedsspecialisten John Page oplysninger om en ubehandlet s\u00e5rbarhed i den aktuelle version af Internet Explorer og demonstrerede dens udnyttelse.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Internet Explorer | ProHoster","og:description":"\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:10+00:00","article:modified_time":"2019-10-31T18:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31611","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:14:43","updated":"2026-01-21 06:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/31611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=31611"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/31611\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/23533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=31611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=31611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=31611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}