{"id":35502,"date":"2019-10-31T22:04:42","date_gmt":"2019-10-31T19:04:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-firefox-67-0-4-i-60-7-2-ustranena-eshhyo-odna-0-day-uyazvimost\/"},"modified":"2019-10-31T22:04:42","modified_gmt":"2019-10-31T19:04:42","slug":"v-firefox-67-0-4-i-60-7-2-ustranena-eshhyo-odna-0-day-uyazvimost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/v-firefox-67-0-4-i-60-7-2-ustranena-eshhyo-odna-0-day-uyazvimost","title":{"rendered":"In Firefox 67.0.4 und 60.7.2 wurde eine weitere 0-Day-Schwachstelle behoben","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nach den Ver\u00f6ffentlichungen von Firefox 67.0.3 und 60.7.1 ver\u00f6ffentlicht<\/a><\/noindex> wurden zus\u00e4tzliche Korrekturausgaben 67.0.4 und 60.7.2 ver\u00f6ffentlicht, in denen die zweite 0-Day-Sicherheitsanf\u00e4lligkeit eine Schwachstelle<\/a><\/noindex> (CVE-2019-11708) beseitigt wurde, die den Sandbox-Isolationsmechanismus umgeht. Das Problem nutzt die Manipulation eines IPC-Aufrufs an Prompt:Open, um Webinhalte, die vom untergeordneten Prozess ausgew\u00e4hlt wurden, im \u00fcbergeordneten Prozess zu \u00f6ffnen, in dem kein Sandbox angewendet wird. In Kombination mit einer anderen Schwachstelle erm\u00f6glicht dieses Problem das Umgehen aller Schutzebenen und die Ausf\u00fchrung von Code im System.<\/p>\n

Die in den letzten beiden Versionen von Firefox entdeckten Schwachstellen wurden ausgenutzt<\/a><\/noindex> um einen Angriff auf Mitarbeiter der Kryptow\u00e4hrungsb\u00f6rse Coinbase zu organisieren, und zudem wurden<\/a><\/noindex> um Malware f\u00fcr die macOS-Plattform zu verbreiten. Es wird behauptet<\/a><\/noindex>, dass Informationen \u00fcber die erste Schwachstelle am 15. April von einem Mitglied des Google Project Zero-Projekts an Mozilla weitergeleitet wurden und am 10. Juni in der Beta-Version von Firefox 68 waren (vermutlich haben die Angreifer den ver\u00f6ffentlichten Patch analysiert und einen Exploit vorbereitet, indem sie eine weitere Schwachstelle zum Umgehen der Sandbox-Isolierung ausgenutzt haben). 21. November<\/a><\/noindex> Nach den Ver\u00f6ffentlichungen von Firefox 67.0.3 und 60.7.1 wurden die zus\u00e4tzlichen Korrekturausgaben 67.0.4 ver\u00f6ffentlicht. <\/p>\n

<\/a><\/noindex><\/p>\n

Quelle: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c\u0438 Firefox 67.0.3 \u0438 60.7.1 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u043b\u0438\u0437\u044b 67.0.4 \u0438 60.7.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432\u0442\u043e\u0440\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-11708), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 IPC-\u0432\u044b\u0437\u043e\u0432\u043e\u043c Prompt:Open \u0434\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0432 \u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f sandbox, web-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430, \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35502","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47In Firefox 67.0.4 und 60.7.2 wurde eine weitere 0-Day-Sicherheitsanf\u00e4lligkeit behoben | ProHoster","description":"\ud83e\udd47In Firefox 67.0.4 und 60.7.2 wurde eine weitere 0-Day-Sicherheitsanf\u00e4lligkeit behoben | ProHoster","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/v-firefox-67-0-4-i-60-7-2-ustranena-eshhyo-odna-0-day-uyazvimost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Firefox 67.0.4 \u0438 60.7.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c\u0438 Firefox 67.0.3 \u0438 60.7.1 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u043b\u0438\u0437\u044b 67.0.4 \u0438.","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/v-firefox-67-0-4-i-60-7-2-ustranena-eshhyo-odna-0-day-uyazvimost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:04:42+00:00","article:modified_time":"2019-10-31T19:04:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35502","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:33:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:01:26","updated":"2026-01-21 23:33:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/35502","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=35502"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/35502\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=35502"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=35502"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=35502"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}