{"id":31611,"date":"2019-10-31T21:42:10","date_gmt":"2019-10-31T18:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer\/"},"modified":"2019-10-31T21:42:10","modified_gmt":"2019-10-31T18:42:10","slug":"microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","title":{"rendered":"Microsoft on loobunud lahendamast nullp\u00e4eva haavatavust Internet Exploreris","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Reedel, 12. aprillil avalikustas k\u00fcberturbe ekspert John Page teavet parandamata haavatavuse kohta Internet Exploreri praeguses versioonis ning demonstreeris selle rakendamist. See haavatavus v\u00f5ib potentsiaalselt lubada r\u00fcndajal p\u00e4\u00e4seda Windowsi s\u00fcsteemide kohalike failide sisule, m\u00f6\u00f6da minnes brauseri turvas\u00fcsteemist.<\/p>\n

\"Microsoft<\/p>\n

Haavatavus seisneb selles, kuidas Internet Explorer t\u00f6\u00f6tleb MHTML-formaatides faile, millel on tavaliselt laiendid .mht v\u00f5i .mhtml. See formaat kasutatakse Internet Exploreris veebilehtede salvestamiseks vaikimisi ning v\u00f5imaldab salvestada kogu lehe sisu koos meediaga \u00fchte faili. Praeguseks enamiku kaasaegsete brauserite jaoks ei salvestata veebilehti MHT formaadis ja kasutatakse selle asemel standardset veebiformaati \u2013 HTML, kuid nad toetavad siiski failide t\u00f6\u00f6tlemist selles formaadis ning v\u00f5ivad seda kasutada salvestamiseks vastavate seadistuste v\u00f5i laienduste abil.<\/p>\n

Johni avastatud haavatavus kuulub XXE (XML eXternal Entity) haavatavuste klassi ja see seisneb XML-koodi t\u00f6\u00f6tleja vale konfigureerimises Internet Exploreris. \"See haavatavus v\u00f5imaldab kaugvaate r\u00fcndajal p\u00e4\u00e4seda kasutaja kohalikele failidele ja n\u00e4iteks extrahida teavet s\u00fcsteemis installitud tarkvara versiooni kohta,\" \u00fctleb Page. \"Nii tagastab p\u00e4ring ‘c:Python27NEWS.txt’ selle programmi (antud juhul Python'i interpreteerija) versiooni.\"<\/p>\n

<\/center><\/p>\n

Kuna Windowsis avatakse k\u00f5ik MHT-failid vaikimisi Internet Exploreris, on selle haavatavuse kasutamine trivialne \u00fclesanne, kuna kasutajalt n\u00f5utakse vaid kahte kl\u00f5psamist ohtlikule failile, mille ta on saanud e-kirjas, sotsiaalmeedias v\u00f5i s\u00f5numiteenusena.<\/p>\n

\"Microsoft<\/p>\n

Kuna tavaliselt, kui luuakse ActiveX-objekti eksemplar, nagu Microsoft.XMLHTTP, annab Internet Explorer kasutajale s\u00fcsteemi turvadeadke, mis k\u00fcsib kinnitust blokeeritud sisu aktiveerimiseks, selgitab uurija. \"Kuid, kui avada eelnevalt ette valmistatud .mht-fail, kasutades spetsiaalselt vormindatud t\u00e4htedega, ei saa kasutaja hoiatust potentsiaalselt ohtliku sisu kohta.\"<\/p>\n

Peyge s\u00f5nul testis ta edukaid haavatavusi praeguses Internet Explorer 11 versioonis, millele on lisatud k\u00f5ik viimased turvauuendused Windows 7, Windows 10 ja Windows Server 2012 R2 s\u00fcsteemides.<\/p>\n

T\u00f5en\u00e4oliselt on ainus hea uudis selle haavatavuse avalikustamisel see, et kunagi domineeriv Internet Exploreri turuosa on praegu langenud umbes 7,34% -ni, vastavalt NetMarketShare'i andmetele. Kuid kuna Windows kasutab Internet Exploreri MHT-failide avamiseks vaikeprogrammina, ei pea kasutajad IE-d vaikimisi brauserina kasutama ja nad on endiselt haavatavad, kuni IE on nende s\u00fcsteemides olemas ning nad ei p\u00f6\u00f6ra t\u00e4helepanu internetis allalaaditavatele failiformaatidele.<\/p>\n

Juba 27. m\u00e4rtsil teatas John Microsoftile sellest haavatavusest nende brauseris, kuid 10. aprillil sai uurija ettev\u00f5ttelt vastuse, milles \u00f6eldi, et nad ei pea seda probleemi kriitiliselt oluliseks.<\/p>\n

\"Parandus antakse v\u00e4lja alles j\u00e4rgmise tooteversiooniga,\" \u00f6eldakse Microsofti kirjas. \"Praegu ei plaani me selle probleemiga seotud lahendust v\u00e4lja anda.\"<\/p>\n

Peale Microsofti selget reaktsiooni avaldas uurija oma veebisaidil \u00fcksikasjad nullp\u00e4eva haavatavuse kohta, samuti demonstraatorikoodi ja video YouTube'is.<\/p>\n<\/p>\n

\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Kuigi selle haavatavuse rakendamine ei ole nii lihtne ja n\u00f5uab mingil moel kasutaja sundimist tundmatu MHT-faili k\u00e4ivitamiseks, ei peaks seda haavatavust kergek\u00e4eliselt v\u00f5tma, hoolimata Microsofti puuduvast reageerimisest. Hackerigruppide seas on juba varem kasutatud MHT-faile phishinguks ja pahavarade levitamiseks ning eiOle midagi, mis takistaks neil seda ka praegu teha. <\/p>\n

Kuid selleks, et v\u00e4ltida seda ja palju sarnaseid haavatavusi, piisab lihtsalt t\u00e4helepanu p\u00f6\u00f6ramisest failide laiendusele, mida te Internetist saate, ning nende kontrollimisest viirusevastase tarkvara v\u00f5i VirusTotali veebisaidi abil. Ja t\u00e4iendava kaitse saamiseks seadke failide .mht v\u00f5i .mhtml standardrakenduseks oma lemmikbrauser, mis pole Internet Explorer. N\u00e4iteks Windows 10-s saab seda teha h\u00f5lpsasti men\u00fc\u00fcs \u201eT\u00fc\u00fcbid failide jaoks standardrakenduste valimine\u201c.<\/p>\n

\"Microsoft<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043c\u0438\u043d\u0443\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a Internet Explorer \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 MHTML, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft keeldus parandamast nullp\u00e4eva haavatavust Internet Exploreris | ProHoster","description":"Reedel, 12. aprillil, avaldas k\u00fcberturbe ekspert John Page teavet parandamata haavatavuse kohta Internet Exploreris ja demonstreeris selle rakendamist.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Internet Explorer | ProHoster","og:description":"\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:10+00:00","article:modified_time":"2019-10-31T18:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31611","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:14:43","updated":"2026-01-21 06:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31611"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31611\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}