{"id":94683,"date":"2020-09-20T01:42:01","date_gmt":"2020-09-19T23:42:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-firefox-dlya-android-pozvolyayushhaya-upravlyat-brauzerom-cherez-obshhij-wi-fi"},"modified":"2020-09-20T01:42:01","modified_gmt":"2020-09-19T23:42:01","slug":"uyazvimost-v-firefox-dlya-android-pozvolyayushhaya-upravlyat-brauzerom-cherez-obshhij-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-firefox-dlya-android-pozvolyayushhaya-upravlyat-brauzerom-cherez-obshhij-wi-fi","title":{"rendered":"Nj\u00eb vulnerabilitet n\u00eb Firefox p\u00ebr Android, q\u00eb lejon menaxhimin e shfletuesit p\u00ebrmes Wi-Fi t\u00eb p\u00ebrbashk\u00ebt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb Firefox p\u00ebr Android u zbulua<\/a><\/noindex> serioze vulnerabiliteti<\/a><\/noindex> n\u00eb implementimin e protokollit SSDP<\/a><\/noindex>, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u043c\u0443\u0441\u044f \u0432 \u0442\u043e\u0439 \u0436\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043b\u0438 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u043e\u0442\u0432\u0435\u0442\u0438\u0442\u044c \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u0447\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b Firefox \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435\u043c UPnP XML «LOCATION» \u0441 komandat intent<\/a><\/noindex>, me an\u00eb t\u00eb cilave mund t\u00eb hapni n\u00eb shfletues nj\u00eb URI arbitrar ose t\u00eb th\u00ebrrisni trajtues t\u00eb aplikacioneve t\u00eb tjera. <\/p>\n

Problemi shfaqet deri n\u00eb versionin Firefox p\u00ebr Android 68.11.0<\/a><\/noindex> dhe \u00ebsht\u00eb zgjidhur n\u00eb versionin Firefox p\u00ebr Android 79, dmth, l\u00ebshimet e vjetra klasike t\u00eb Firefox p\u00ebr Android jan\u00eb t\u00eb dob\u00ebta dhe p\u00ebr t\u00eb bllokuar problemin k\u00ebrkohet kalimi n\u00eb revist\u00ebn e re<\/a><\/noindex> t\u00eb shfletuesit (Fenix), i cili p\u00ebrdor motorin GeckoView t\u00eb nd\u00ebrtuar mbi teknologji Firefox Quantum, dhe grupin e bibliotekave Pjes\u00ebt e Mozilla Android<\/a><\/noindex>. Problemi nuk prek versionet e Firefox p\u00ebr sistemet desktop.<\/p>\n

P\u00ebr testimin e vulnerabilitetit \u00ebsht\u00eb p\u00ebrgatitur<\/a><\/noindex> prototipi funksional i eksploitat. Sulmi realizohet pa ndonj\u00eb veprim nga ana e p\u00ebrdoruesit, mjafton q\u00eb n\u00eb pajisjen mobile t\u00eb jet\u00eb e hapur shfletuesi i dob\u00ebt Firefox p\u00ebr Android dhe q\u00eb viktima t\u00eb ndodhet n\u00eb t\u00eb nj\u00ebjtin subnet me serverin SSDP t\u00eb sulmuesit. <\/p>\n

Firefox p\u00ebr Android periodikisht d\u00ebrgon n\u00eb m\u00ebnyr\u00eb katalogjike (multicast UDP) mesazhe SSDP p\u00ebr t\u00eb identifikuar pajisjet q\u00eb transmetojn\u00eb n\u00eb rrjetin lokal, si\u00e7 jan\u00eb lojtar\u00ebt multimedial\u00eb dhe televizor\u00ebt inteligjent\u00eb. T\u00eb gjitha pajisjet n\u00eb rrjetin lokal marrin k\u00ebto mesazhe dhe kan\u00eb mund\u00ebsi t\u00eb d\u00ebrgojn\u00eb p\u00ebrgjigje. N\u00eb m\u00ebnyr\u00eb t\u00eb zakonshme, pajisja kthen nj\u00eb lidhje n\u00eb lokacionin e skedarit XML me informacion rreth pajisjes q\u00eb mb\u00ebshtet UPnP. Gjat\u00eb sulmit, n\u00eb vend t\u00eb lidhjes n\u00eb XML, mund t\u00eb d\u00ebrgohet nj\u00eb URI me komandat intent p\u00ebr Android. <\/p>\n

Me ndihm\u00ebn e komandave intent, mund t\u00eb redirektoni p\u00ebrdoruesin n\u00eb faqe phishing ose t'i jepni nj\u00eb lidhje p\u00ebr nj\u00eb sked\u00eb xpi (navi, do t'i ofroj\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb instaluar nj\u00eb shtes\u00eb). Duke qen\u00eb se p\u00ebrgjigjet e sulmuesit nuk jan\u00eb t\u00eb kufizuara, ai mund t\u00eb p\u00ebrpiqet ta lodh\u00eb p\u00ebrdoruesin dhe t\u00eb mbush\u00eb shfletuesin me propozime p\u00ebr instalim ose me faqe t\u00eb d\u00ebmshme, me shpres\u00ebn se p\u00ebrdoruesi do t\u00eb b\u00ebj\u00eb nj\u00eb gabim dhe do t\u00eb klikoj\u00eb p\u00ebr t\u00eb instaluar paket\u00ebn e d\u00ebmshme. P\u00ebrve\u00e7 hapjes s\u00eb lidhjeve t\u00eb rast\u00ebsishme n\u00eb shfletuesin vet\u00eb, komandat intent mund t\u00eb p\u00ebrdoren p\u00ebr trajtimin e p\u00ebrmbajtjes n\u00eb aplikacione t\u00eb tjera Android, p\u00ebr shembull, mund t\u00eb hapni nj\u00eb model t\u00eb nj\u00eb email-i n\u00eb klientin e post\u00ebs (URI mailto:) ose t\u00eb nisni nd\u00ebrfaqen p\u00ebr t\u00eb b\u00ebr\u00eb nj\u00eb telefonat\u00eb (URI tel:).<\/p>\n


\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 Firefox \u0434\u043b\u044f Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SSDP, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u043c\u0443\u0441\u044f \u0432 \u0442\u043e\u0439 \u0436\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043b\u0438 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u043e\u0442\u0432\u0435\u0442\u0438\u0442\u044c \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u0447\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b Firefox \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435\u043c UPnP XML «LOCATION» \u0441 intent-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438, \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 URI \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94683","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet n\u00eb Firefox p\u00ebr Android, i cili lejon menaxhimin e shfletuesit p\u00ebrmes Wi-Fi t\u00eb p\u00ebrbashk\u00ebt | ProHoster","description":"Nj\u00eb \u00e7\u00ebshtje serioze \u00ebsht\u00eb zbuluar n\u00eb Firefox p\u00ebr Android.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-firefox-dlya-android-pozvolyayushhaya-upravlyat-brauzerom-cherez-obshhij-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Firefox \u0434\u043b\u044f Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0449\u0438\u0439 Wi-Fi | ProHoster","og:description":"\u0412 Firefox \u0434\u043b\u044f Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-firefox-dlya-android-pozvolyayushhaya-upravlyat-brauzerom-cherez-obshhij-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-19T23:42:01+00:00","article:modified_time":"2020-09-19T23:42:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94683","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:21:10","updated":"2022-10-02 05:53:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94683","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94683"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94683\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}