{"id":31611,"date":"2019-10-31T21:42:10","date_gmt":"2019-10-31T18:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer\/"},"modified":"2019-10-31T21:42:10","modified_gmt":"2019-10-31T18:42:10","slug":"microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","title":{"rendered":"Microsoft a refuzat s\u0103 corecteze vulnerabilitatea de tip zero-day \u00een Internet Explorer","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vineri, 12 aprilie, specialistul \u00een securitate informatic\u0103 John Page a publicat informa\u021bii despre o vulnerabilitate necorectat\u0103 \u00een versiunea actual\u0103 a Internet Explorer, precum \u0219i a demonstrat implementarea acesteia. Aceast\u0103 vulnerabilitate poate permite, \u00een mod poten\u021bial, unui atacator s\u0103 ob\u021bin\u0103 con\u021binutul fi\u0219ierelor locale ale utilizatorilor sistemelor Windows, ocolind sistemul de securitate al browserului.<\/p>\n

\"Microsoft<\/p>\n

Vulnerabilitatea const\u0103 \u00een modul \u00een care Internet Explorer proceseaz\u0103 fi\u0219ierele \u00een format MHTML, care, de obicei, au extensia .mht sau .mhtml. Acest format este utilizat implicit \u00een Internet Explorer pentru salvarea paginilor web \u0219i permite salvarea \u00eentregului con\u021binut al paginii \u00eempreun\u0103 cu toate materialele media sub forma unui singur fi\u0219ier. \u00cen prezent, majoritatea browserelor moderne nu mai salveaz\u0103 paginile web \u00een format MHT \u0219i folosesc, \u00een schimb, formatul standard WEB \u2014 HTML, dar \u00eenc\u0103 accept\u0103 procesarea fi\u0219ierelor \u00een acest format \u0219i le pot utiliza pentru salvare \u00een func\u021bie de set\u0103rile corespunz\u0103toare sau prin extensii.<\/p>\n

Vulnerabilitatea descoperit\u0103 de John se \u00eencadreaz\u0103 \u00een clasa vulnerabilit\u0103\u021bilor XXE (XML eXternal Entity) \u0219i const\u0103 \u00een configurarea gre\u0219it\u0103 a procesorului de cod XML \u00een Internet Explorer. \u201eAceast\u0103 vulnerabilitate permite unui atacator de la distan\u021b\u0103 s\u0103 acceseze fi\u0219ierele locale ale utilizatorului \u0219i, de exemplu, s\u0103 extrag\u0103 informa\u021bii despre versiunea software-ului instalat \u00een sistem\u201d, explic\u0103 Page. \u201eAstfel, o solicitare pentru 'c:Python27NEWS.txt' va returna versiunea acestui program (interpretatorul Python, \u00een acest caz)\u201d.<\/p>\n

<\/center><\/p>\n

Dat fiind c\u0103 \u00een Windows toate fi\u0219ierele MHT se deschid implicit \u00een Internet Explorer, utilizarea acestei vulnerabilit\u0103\u021bi este o sarcin\u0103 trivial\u0103, deoarece utilizatorul trebuie doar s\u0103 fac\u0103 dublu clic pe un fi\u0219ier periculos, primit prin email, pe re\u021belele sociale sau prin aplica\u021bii de mesagerie.<\/p>\n

\"Microsoft<\/p>\n

\u00abDe regul\u0103, atunci c\u00e2nd se creeaz\u0103 o instan\u021b\u0103 a unui obiect ActiveX, cum ar fi Microsoft.XMLHTTP, utilizatorul prime\u0219te un avertisment de securitate \u00een Internet Explorer, care \u00eei va solicita confirmarea pentru activarea con\u021binutului blocat\u00bb, explic\u0103 cercet\u0103torul. \u00abCu toate acestea, atunci c\u00e2nd se deschide un fi\u0219ier .mht preg\u0103tit \u00een prealabil utiliz\u00e2nd etichete de marcare <xml> special concepute, utilizatorul nu va primi un avertisment cu privire la con\u021binutul poten\u021bial periculos\u00bb.<\/p>\n

Potrivit lui Page, el a testat cu succes vulnerabilitatea \u00een versiunea actual\u0103 a browserului Internet Explorer 11 cu toate cele mai recente actualiz\u0103ri de securitate \u00een sistemele Windows 7, Windows 10 \u0219i Windows Server 2012 R2.<\/p>\n

Probabil, singura veste bun\u0103 \u00een leg\u0103tur\u0103 cu dezv\u0103luirea acestei vulnerabilit\u0103\u021bi pentru public este faptul c\u0103 fosta cot\u0103 de pia\u021b\u0103 dominant\u0103 a Internet Explorer a sc\u0103zut \u00een prezent la aproximativ 7,34 %, conform NetMarketShare. Dar, deoarece Windows folose\u0219te Internet Explorer ca aplica\u021bie implicit\u0103 pentru deschiderea fi\u0219ierelor MHT, utilizatorii nu trebuie s\u0103 aib\u0103 IE ca browser implicit, \u0219i sunt \u00eenc\u0103 vulnerabili, at\u00e2ta timp c\u00e2t IE este \u00eenc\u0103 prezent \u00een sistemele lor \u0219i nu acord\u0103 aten\u021bie formatului fi\u0219ierelor desc\u0103rcate de pe internet.<\/p>\n

Pe 27 martie, John a notificat Microsoft despre aceast\u0103 vulnerabilitate \u00een browserul lor, dar pe 10 aprilie, cercet\u0103torul a primit un r\u0103spuns de la companie, \u00een care se preciza c\u0103 nu consider\u0103 aceast\u0103 problem\u0103 critic\u0103.<\/p>\n

\u00abO solu\u021bie va fi lansat\u0103 doar cu urm\u0103toarea versiune a produsului\u00bb, spune Microsoft \u00een scrisoare. \u00ab\u00cen prezent, nu avem planuri de a lansa o solu\u021bie pentru aceast\u0103 problem\u0103\u00bb.<\/p>\n

Dup\u0103 reac\u021bia clar\u0103 a Microsoft, cercet\u0103torul a publicat detaliile despre vulnerabilitatea zero-day pe site-ul s\u0103u, precum \u0219i codul demonstra\u021bie \u0219i un videoclip pe YouTube.<\/p>\n<\/p>\n

\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

De\u0219i exploatarea acestei vulnerabilit\u0103\u021bi nu este at\u00e2t de simpl\u0103 \u0219i necesit\u0103 \u00eentr-un fel s\u0103 for\u021beze utilizatorul s\u0103 ruleze un fi\u0219ier necunoscut \u00een format MHT, aceast\u0103 vulnerabilitate nu trebuie subestimat\u0103, \u00een ciuda absen\u021bei reac\u021biei din partea Microsoft. Grup\u0103ri de hackeri au folosit deja fi\u0219iere MHT pentru phishing \u0219i distribuirea de programe malware \u00een trecut, nimic nu le va \u00eempiedica s\u0103 fac\u0103 acest lucru \u0219i acum. <\/p>\n

Cu toate acestea, pentru a evita aceast\u0103 \u0219i multe alte vulnerabilit\u0103\u021bi similare, este suficient s\u0103 acorda\u021bi aten\u021bie extensiei fi\u0219ierelor pe care le primi\u021bi din re\u021beaua Internet \u0219i s\u0103 le verifica\u021bi cu un antivirus sau pe site-ul VirusTotal. Iar pentru o protec\u021bie suplimentar\u0103, seta\u021bi pentru fi\u0219ierele .mht sau .mhtml un program standard preferat, diferit de Internet Explorer. De exemplu, \u00een Windows 10 este destul de u\u0219or s\u0103 face\u021bi acest lucru din meniul \u201eAlegerea aplica\u021biilor implicite pentru tipurile de fi\u0219iere\u201d.<\/p>\n

\"Microsoft<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Sursa: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043c\u0438\u043d\u0443\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a Internet Explorer \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 MHTML, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft a refuzat s\u0103 rectifice vulnerabilitatea zero-day \u00een Internet Explorer | ProHoster","description":"Vineri, 12 aprilie, expertul \u00een securitate cibernetic\u0103 John Page a publicat informa\u021bii despre o vulnerabilitate nerezolvat\u0103 \u00een versiunea actual\u0103 a Internet Explorer \u0219i a demonstrat cum poate fi exploatat\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Internet Explorer | ProHoster","og:description":"\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:10+00:00","article:modified_time":"2019-10-31T18:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31611","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:14:43","updated":"2026-01-21 06:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31611"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31611\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/23533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}