{"id":71652,"date":"2020-02-27T08:51:34","date_gmt":"2020-02-27T05:51:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8"},"modified":"2020-03-03T16:10:40","modified_gmt":"2020-03-03T13:10:40","slug":"0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","title":{"rendered":"0-day vulnerabilitet n\u00eb Chrome, e identifikuar p\u00ebrmes analiz\u00ebs s\u00eb ndryshimeve n\u00eb motorin V8","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga kompania Exodus Intelligence demonstruan<\/a><\/noindex> jan\u00eb fokusuar n\u00eb nj\u00eb dob\u00ebsi n\u00eb procesin e rregullimit t\u00eb dob\u00ebsive n\u00eb kodin b\u00ebrthamor t\u00eb Chrome\/Chromium. Problemi \u00ebsht\u00eb se Google zbardh informacionin se p\u00ebrmir\u00ebsimet e b\u00ebr\u00eb kan\u00eb t\u00eb b\u00ebjn\u00eb me probleme sigurie vet\u00ebm pas publikimit, por
\nshton n\u00eb depon kodin p\u00ebr t\u00eb adresuar dob\u00ebsin\u00eb n\u00eb motorin V8 para publikimit t\u00eb versionit. P\u00ebr nj\u00eb koh\u00eb, rregullimet kalojn\u00eb testimin dhe krijohet nj\u00eb dritare, gjat\u00eb s\u00eb cil\u00ebs dob\u00ebsia b\u00ebhet e rregulluar n\u00eb kodin b\u00ebrthamor dhe e disponueshme p\u00ebr analiz\u00eb, por dob\u00ebsia mbetet e pap\u00ebrmir\u00ebsuar n\u00eb sistemet e p\u00ebrdoruesve. <\/p>\n

Duke studiuar ndryshimet e b\u00ebra n\u00eb depo, k\u00ebrkuesit vuri re se u shtua m\u00eb 19 shkurt ndalon<\/a><\/noindex> dhe brenda tre dit\u00ebsh arrit\u00ebn t\u00eb p\u00ebrgatiten eksploit<\/a><\/noindex>, e cila prekte versionet aktuale t\u00eb Chrome (eksploiti i publikuar nuk p\u00ebrfshinte komponent\u00ebt p\u00ebr t\u00eb anashkaluar izolimin sandbox). Kompania Google shpejt ka lan\u00e7uar<\/a><\/noindex> l\u00ebshoi versionin Chrome 80.0.3987.122, duke eliminuar at\u00eb q\u00eb lidhej me eksploitin e propozuar vulnerabiliteti<\/a><\/noindex> (CVE-2020-6418). Dob\u00ebsia fillimisht ishte identifikuar nga inxhinier\u00ebt e Google dhe ishte shkaktuar nga nj\u00eb problem me p\u00ebrpunimin e tipeve n\u00eb operacionin JSCreate, i cili mund t\u00eb shfryt\u00ebzohej p\u00ebrmes metod\u00ebs Array.pop ose Array.prototype.pop. Vlen t\u00eb p\u00ebrmendet se nj\u00eb problem i ngjash\u00ebm kishte u rregullua<\/a><\/noindex> ndodhur n\u00eb Firefox ver\u00ebn e kaluar.<\/p>\n

K\u00ebrkuesit gjithashtu vuri re se ishte e leht\u00eb t\u00eb krijoheshin eksploite p\u00ebr shkak t\u00eb p\u00ebrfshirjes n\u00eb Chrome 80<\/a><\/noindex> mekanizmin e paketimit t\u00eb treguesve<\/a><\/noindex> (n\u00eb vend t\u00eb vler\u00ebs s\u00eb plot\u00eb 64-bit ruhet vet\u00ebm pjesa e poshtme unike e treguesit, gj\u00eb q\u00eb lejon t\u00eb reduktohet ndjesh\u00ebm konsumimi i memories n\u00eb grumbull). P\u00ebr shembull, disa struktura t\u00eb dh\u00ebnash n\u00eb fillim t\u00eb grumbullit, si\u00e7 \u00ebsht\u00eb tabela e funksioneve t\u00eb integruara, objektet «konteksti native» dhe objektet rr\u00ebnj\u00ebsore<\/a><\/noindex> t\u00eb mbledh\u00ebsit t\u00eb plehrave tani vendosen n\u00eb adresa t\u00eb paketuar q\u00eb jan\u00eb parashikues dhe t\u00eb shkruashme.<\/p>\n

\u00cbsht\u00eb interesante q\u00eb pothuajse nj\u00eb vit m\u00eb par\u00eb, kompania Exodus Intelligence b\u00ebri<\/a><\/noindex> nj\u00eb demonstrim t\u00eb ngjash\u00ebm t\u00eb mund\u00ebsis\u00eb p\u00ebr t\u00eb krijuar nj\u00eb eksploit p\u00ebrmes studimit t\u00eb regjistrit publik t\u00eb rregullimeve n\u00eb V8, por, duke u par\u00eb, nuk u mor\u00ebn p\u00ebrfundimet e duhura. N\u00eb vend t\u00eb k\u00ebrkuesve t\u00eb
\nExodus Intelligence mund t\u00eb ishin dhe kriminel\u00eb ose agjenci t\u00eb specializuara, t\u00eb cil\u00ebt, gjat\u00eb krijimit t\u00eb eksploitit, do t\u00eb kishin mund\u00ebsin\u00eb t\u00eb shfryt\u00ebzonin dob\u00ebsin\u00eb n\u00eb fsheht\u00ebsi p\u00ebr dit\u00eb ose madje jav\u00eb para formimit t\u00eb versionit t\u00eb radh\u00ebs t\u00eb Chrome. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Exodus Intelligence \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0430\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435 Chrome\/Chromium. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e Google \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u043b\u0438\u0437\u0430, \u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0440\u0435\u043b\u0438\u0437\u0430. \u041a\u0430\u043a\u043e\u0435-\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71652","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia 0-day n\u00eb Chrome, e identifikuar p\u00ebrmes analiz\u00ebs s\u00eb ndryshimeve n\u00eb motorin V8 | ProHoster","description":"K\u00ebrkuesit nga kompania Exodus Intelligence demonstruan nj\u00eb dob\u00ebsi n\u00eb procesin e rregullimeve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd470-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Exodus Intelligence \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0430\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/0-day-uyazvimost-v-chrome-vyyavlennaya-cherez-analiz-izmenenij-v-dvizhke-v8","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T05:51:34+00:00","article:modified_time":"2020-03-03T13:10:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71652","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:58:25","updated":"2022-10-01 14:35:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71652","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=71652"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71652\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=71652"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=71652"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=71652"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}