{"id":71652,"date":"2020-02-27T08:51:34","date_gmt":"2020-02-27T05:51:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8"},"modified":"2020-03-03T16:10:40","modified_gmt":"2020-03-03T13:10:40","slug":"0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","title":{"rendered":"vulnerabilitet 0-day n\u00eb Chrome, e zbuluar p\u00ebrmes analiz\u00ebs s\u00eb ndryshimeve n\u00eb motorin V8","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga kompania Exodus Intelligence demonstruan<\/a><\/noindex> nj\u00eb pik\u00eb t\u00eb dob\u00ebt n\u00eb procesin e rregullimit t\u00eb dob\u00ebsive n\u00eb baz\u00ebn e kodit t\u00eb Chrome\/Chromium. Problemi \u00ebsht\u00eb se Google zbulon informacione se rregullimet e b\u00ebr\u00eb kan\u00eb t\u00eb b\u00ebjn\u00eb me probleme t\u00eb siguris\u00eb vet\u00ebm pas publikimit, por
\nshtohet n\u00eb depo kod p\u00ebr t\u00eb adresuar dob\u00ebsin\u00eb n\u00eb motorin V8 p\u00ebrpara publikimit. P\u00ebr nj\u00eb koh\u00eb, rregullimet kalojn\u00eb testimin dhe krijohet nj\u00eb dritare, gjat\u00eb s\u00eb cil\u00ebs dob\u00ebsia b\u00ebhet e korrigjuar n\u00eb baz\u00ebn e kodit dhe e disponueshme p\u00ebr analiz\u00eb, por dob\u00ebsia mbetet e pandryshuar n\u00eb sistemet e p\u00ebrdoruesve. <\/p>\n

Duke studiuar ndryshimet e b\u00ebra n\u00eb depo, k\u00ebrkuesit v\u00ebrenin se ishte shtuar m\u00eb 19 shkurt korrigjimin<\/a><\/noindex> dhe brenda tre dit\u00ebve arrit\u00ebn t\u00eb p\u00ebrgatisin lejon q\u00eb t\u00eb shkaktohet nj\u00eb crash p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb stringu t\u00eb gjat\u00eb (disa kilobajt) n\u00eb komand\u00ebn EHLO, por vulnerabiliteti mund t\u00eb shfryt\u00ebzohet edhe p\u00ebrmes komandave t\u00eb tjera, dhe potencialisht mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb organizuar ekzekutimin e kodit.<\/a><\/noindex>, q\u00eb godet versionet aktuale t\u00eb Chrome (eksploitimi i publikuar nuk p\u00ebrfshinte komponent\u00ebt p\u00ebr t\u00eb anashkaluar izolimin e sandbox-it). Kompania Google me shpejt\u00ebsi l\u00ebshoi<\/a><\/noindex> p\u00ebrmir\u00ebsimin Chrome 80.0.3987.122, duke eliminuar lidhjen me eksploitin e propozuar vulnerabiliteti<\/a><\/noindex> (CVE-2020-6418). Nj\u00eb cenueshm\u00ebri u identifikua fillimisht nga inxhinier\u00ebt e Google dhe ishte shkaktuar nga nj\u00eb problem me trajtimin e tipeve n\u00eb operacionin JSCreate, i cili mund t\u00eb shfryt\u00ebzohet p\u00ebrmes metod\u00ebs Array.pop ose Array.prototype.pop. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb p\u00ebrmendet se nj\u00eb problem i ngjash\u00ebm ishte u rregullua<\/a><\/noindex> n\u00eb Firefox ver\u00ebn e kaluar.<\/p>\n

K\u00ebrkuesit gjithashtu theksuan se ishte m\u00eb e thjesht\u00eb t\u00eb krijoheshin eksploit p\u00ebr shkak t\u00eb p\u00ebrfshirjes n\u00eb Chrome 80<\/a><\/noindex> mekanizmin e paketimit t\u00eb treguesve<\/a><\/noindex> (n\u00eb vend t\u00eb vler\u00ebs s\u00eb plot\u00eb 64-bit ruhen vet\u00ebm bitet e poshtme unike t\u00eb treguesit, \u00e7ka lejon nj\u00eb konsum t\u00eb konsideruesh\u00ebm m\u00eb t\u00eb ul\u00ebt t\u00eb memories n\u00eb grumbull). P\u00ebr shembull, disa struktura t\u00eb dh\u00ebnash n\u00eb fillim t\u00eb grumbullit, si tabela e funksioneve t\u00eb integrating, objektet \"native context\" dhe objektet rr\u00ebnj\u00ebsore<\/a><\/noindex> t\u00eb grumbulluesit t\u00eb plehrave, tani vendosen n\u00eb adresa t\u00eb paketuar q\u00eb jan\u00eb parashikuesh\u00ebm dhe t\u00eb shkruara.<\/p>\n

\u00cbsht\u00eb interesante q\u00eb pothuajse nj\u00eb vit m\u00eb par\u00eb, kompania Exodus Intelligence b\u00ebri<\/a><\/noindex> nj\u00eb demonstrim t\u00eb ngjash\u00ebm t\u00eb mund\u00ebsis\u00eb p\u00ebr t\u00eb krijuar nj\u00eb eksploit duke e bazuar k\u00ebt\u00eb n\u00eb studimin e logjeve publike t\u00eb rim\u00ebk\u00ebmbjes n\u00eb V8, por duket se nuk jan\u00eb nxjerr\u00eb p\u00ebrfundime t\u00eb duhura. N\u00eb vendin e k\u00ebrkuesve
\nExodus Intelligence mund t\u00eb ken\u00eb qen\u00eb aktor\u00eb t\u00eb k\u00ebqij ose agjenci t\u00eb inteligjenc\u00ebs, t\u00eb cil\u00ebt, gjat\u00eb krijimit t\u00eb exploit-it, do t\u00eb kishin mund\u00ebsin\u00eb t\u00eb shfryt\u00ebzonin nj\u00eb vulnerabilitet p\u00ebr dit\u00eb ose madje jav\u00eb para krijimit t\u00eb nj\u00eb versioni t\u00eb ri t\u00eb Chrome. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Exodus Intelligence \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0430\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 Chrome\/Chromium. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e Google \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u043b\u0438\u0437\u0430, \u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0440\u0435\u043b\u0438\u0437\u0430. \u041a\u0430\u043a\u043e\u0435-\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71652","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabiliteti 0-day n\u00eb Chrome, i zbuluar p\u00ebrmes analiz\u00ebs s\u00eb ndryshimeve n\u00eb motorin V8 | ProHoster","description":"Hulumt\u00ebtar\u00ebt nga kompania Exodus Intelligence demonstruan nj\u00eb pik\u00eb t\u00eb dob\u00ebt n\u00eb procesin e rregullimeve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd470-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Exodus Intelligence \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0430\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T05:51:34+00:00","article:modified_time":"2020-03-03T13:10:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71652","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:58:25","updated":"2022-10-01 14:35:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71652","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=71652"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71652\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=71652"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=71652"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=71652"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}