{"id":31611,"date":"2019-10-31T21:42:10","date_gmt":"2019-10-31T18:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer\/"},"modified":"2019-10-31T21:42:10","modified_gmt":"2019-10-31T18:42:10","slug":"microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","title":{"rendered":"Microsoft keeldus parandamast nullp\u00e4evast haavatavust Internet Exploreris","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Reede, 12. aprillil avalikustas info- ja k\u00fcberturbe spetsialist John Page teavet parandamata haavatavuse kohta, mis on olemas Internet Explorer'i uusimas versioonis, ning demonstreeris selle toimimist. See haavatavus v\u00f5ib potentsiaalselt lubada kurjategijal p\u00e4\u00e4seda ligi Windowsi s\u00fcsteemi kohalike failide sisule, m\u00f6\u00f6da minnes brauseri turvas\u00fcsteemist.<\/p>\n

\"Microsoft<\/p>\n

Haavatavus seisneb selles, kuidas Internet Explorer k\u00e4itleb MHTML-formaadis faile, mis tavaliselt omavad laiendit .mht v\u00f5i .mhtml. See formaat on Internet Explorer'i vaikeseade veebilehtede salvestamiseks ja v\u00f5imaldab salvestada kogu lehe sisu koos meedia sisuga \u00fchesainsas failis. Praegu ei salvesta enamik kaasaegseid brausereid enam veebilehti MHT formaadis, vaid kasutavad selleks veebistandardina HTML formaati, kuigi nad toetavad endiselt MHTML-failide k\u00e4itlemist ning v\u00f5ivad seda kasutada salvestamiseks vastava seadistuse v\u00f5i laienduste kaudu.<\/p>\n

Johni avastatud haavatavus kuulub XXE (XML eXternal Entity) haavatavuste klassi ja seisneb Internet Explorer'i XML-koodi t\u00f6\u00f6tleja vale konfiguratsioonis. \"See haavatavus v\u00f5imaldab eemal asuval kurjategijal p\u00e4\u00e4seda ligi kasutaja kohalikele failidele ja n\u00e4iteks v\u00e4ljav\u00f5tta teavet s\u00fcsteemi tarkvara versiooni kohta,\" r\u00e4\u00e4gib Page. \"Nii, p\u00e4ring 'c:Python27NEWS.txt' tagastab selle programmi (antud juhul Python'i interpreteeri) versiooni.\"<\/p>\n

<\/center><\/p>\n

Kuna Windowsis avatakse k\u00f5ik MHT failid vaikimisi Internet Exploreris, on selle haavatavuse kasutamine triviaalne \u00fclesanne, kuna kasutaja peab vaid kahekordselt kl\u00f5psama ohtlikul failil, mille ta on saanud e-kirja, sotsiaalmeedia v\u00f5i s\u00f5numirakenduste kaudu.<\/p>\n

\"Microsoft<\/p>\n

\"Tavaliselt, kui luuakse ActiveX objekti eksemplar, nagu Microsoft.XMLHTTP, saab kasutaja Internet Exploreris turvas\u00fcsteemi hoiatuse, mis k\u00fcsib kinnitust blokeeritud sisu aktiveerimiseks,\" selgitab uurija. \"Kuid kui avada eelnevalt ette valmistatud .mht fail koos eraldi vormindatud siltidega, ei saa kasutaja hoiatust potentsiaalselt ohtliku sisu kohta.\"<\/p>\n

Page'i s\u00f5nul on ta edukalt testinud haavatavust praeguses Internet Explorer 11 versioonis koos k\u00f5ikide viimaste turvapaikadega Windows 7, Windows 10 ja Windows Server 2012 R2 s\u00fcsteemides.<\/p>\n

T\u00f5en\u00e4oliselt on ainus hea uudis selle haavatavuse avaldamises avalikkusele see, et endine turuosa juht Internet Exploreris on n\u00fc\u00fcd v\u00e4henenud vaid 7,34%-ni, vastavalt NetMarketShare'ile. Kuid kuna Windows kasutab MHT failide avamiseks vaikimisi Internet Explorerit, ei pea kasutajad IE-d vaikimisi brauserina installima, ja nad j\u00e4\u00e4vad endiselt haavatavaks, kuni IE on endiselt nende s\u00fcsteemides ja nad ei p\u00f6\u00f6ra t\u00e4helepanu Internetist allalaetavate failide formaadile.<\/p>\n

Veel 27. m\u00e4rtsil teavitas John Microsofti sellest haavatavusest nende brauseris, kuid 10. aprillil sai uurija ettev\u00f5ttelt vastuse, milles \u00f6eldi, et nad ei pea seda probleemi kriitiliselt t\u00e4htsaks.<\/p>\n

\"Kinnitus antakse ainult j\u00e4rgmise tooteversiooniga,\" seisab Microsofti kirjas. \"Praegu ei plaani me selle probleemi lahendamiseks lahendust v\u00e4lja anda.\"<\/p>\n

P\u00e4rast Microsofti \u00fchem\u00f5ttelist reaktsiooni avaldas uurija oma veebisaidil nullp\u00e4eva haavatavuse \u00fcksikasjad, samuti demonstreeriva koodi ja video YouTube'is.<\/p>\n<\/p>\n

\r\n \"Vaata\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Kuigi selle haavatavuse rakendamine pole sugugi lihtne ja n\u00f5uab mingisuguse seadusega survestada kasutajat tundmatut MHT formaadis faili k\u00e4ivitama, ei tohiks seda haavatavust v\u00f5tta kergek\u00e4eliselt, vaatamata Microsofti vastuse puudumisele. H\u00e4kkimisr\u00fchmad on juba varem kasutanud MHT faile phishingiks ja pahavara levitamiseks, mis ei takista neil sellega hetkel tegelemast. <\/p>\n

Kuid selle ja paljude sarnaste haavatavuste v\u00e4ltimiseks piisab, kui olla ettevaatlik failide laiendite osas, mida saate Internetist, ja kontrollida neid viiruset\u00f5rjeprogrammi v\u00f5i VirusTotal veebisaidi kaudu. T\u00e4iendava kaitse tagamiseks m\u00e4\u00e4rake .mht v\u00f5i .mhtml failidele oma lemmikbrauser, mis ei ole Internet Explorer. N\u00e4iteks Windows 10-s tehakse seda \u00fcsna lihtsalt \u2018Failit\u00fc\u00fcpide vaikimisi rakenduste valimise\u2019 men\u00fc\u00fcs.<\/p>\n

\"Microsoft<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043c\u0438\u043d\u0443\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a Internet Explorer \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 MHTML, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft keeldus parandamast Internet Exploreri nullp\u00e4eva haavatavust | ProHoster","description":"Reedel, 12. aprillil avaldas k\u00fcberturbe ekspert John Page teavet parandamata haavatavuse kohta viimases Internet Exploreri versioonis ning demonstreeris selle kasutamist.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Internet Explorer | ProHoster","og:description":"\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:10+00:00","article:modified_time":"2019-10-31T18:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31611","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:14:43","updated":"2026-01-21 06:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31611"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31611\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}