{"id":31611,"date":"2019-10-31T21:42:10","date_gmt":"2019-10-31T18:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer\/"},"modified":"2019-10-31T21:42:10","modified_gmt":"2019-10-31T18:42:10","slug":"microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","title":{"rendered":"Microsoft har v\u00e4grat att \u00e5tg\u00e4rda en noll-dagars s\u00e5rbarhet i Internet Explorer","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Fredagen den 12 april publicerade informationss\u00e4kerhetsspecialisten John Page information om en obotad s\u00e5rbarhet i den aktuella versionen av Internet Explorer, och demonstrerade dess utnyttjande. Denna s\u00e5rbarhet kan potentiellt till\u00e5ta en angripare att f\u00e5 \u00e5tkomst till lokala filers inneh\u00e5ll i Windows-system, vilket bypassar webbl\u00e4sarens s\u00e4kerhetssystem.<\/p>\n

\"Microsoft<\/p>\n

S\u00e5rbarheten ligger i hur Internet Explorer hanterar filer i MHTML-format, som vanligtvis har fil\u00e4ndelsen .mht eller .mhtml. Detta format anv\u00e4nds i Internet Explorer som standard f\u00f6r att spara webbsidor och g\u00f6r det m\u00f6jligt att spara hela sidinneh\u00e5llet tillsammans med allt mediainneh\u00e5ll som en enda fil. F\u00f6r n\u00e4rvarande sparar de flesta moderna webbl\u00e4sare inte l\u00e4ngre webbsidor i MHT-format utan anv\u00e4nder det standardiserade WEB-formatet \u2014 HTML, men de st\u00f6der fortfarande hantering av filer i detta format och kan anv\u00e4nda det f\u00f6r att spara med l\u00e4mpliga inst\u00e4llningar eller genom till\u00e4gg.<\/p>\n

S\u00e5rbarheten som John uppt\u00e4ckte tillh\u00f6r klassen XXE (XML eXternal Entity) s\u00e5rbarheter och beror p\u00e5 felaktig konfiguration av XML-kodshanteraren i Internet Explorer. \"Denna s\u00e5rbarhet till\u00e5ter en avl\u00e4gsen angripare att f\u00e5 tillg\u00e5ng till anv\u00e4ndarens lokala filer och till exempel extrahera information om versionen av den installerade programvaran i systemet\", ber\u00e4ttar Page. \"S\u00e5ledes kommer en f\u00f6rfr\u00e5gan till 'c:Python27NEWS.txt' att returnera versionen av detta program (Python-tolk i detta fall).\"<\/p>\n

<\/center><\/p>\n

Eftersom alla MHT-filer i Windows som standard \u00f6ppnas i Internet Explorer \u00e4r det en trivsam uppgift att utnyttja den h\u00e4r s\u00e5rbarheten, eftersom anv\u00e4ndaren bara beh\u00f6ver dubbelklicka p\u00e5 en farlig fil som de f\u00e5tt via e-post, sociala medier eller meddelandeappar.<\/p>\n

\"Microsoft<\/p>\n

\"Som regel, n\u00e4r ett ActiveX-objekt, s\u00e5som Microsoft.XMLHTTP, skapas, f\u00e5r anv\u00e4ndaren en s\u00e4kerhetsvarning i Internet Explorer som beg\u00e4r bekr\u00e4ftelse f\u00f6r att aktivera blockerat inneh\u00e5ll,\" f\u00f6rklarar forskaren. \"Men n\u00e4r en f\u00f6rberedd .mht-fil \u00f6ppnas med hj\u00e4lp av speciellt formaterade -taggar f\u00e5r anv\u00e4ndaren ingen varning om potentiellt farligt inneh\u00e5ll.\"<\/p>\n

Enligt Page har han framg\u00e5ngsrikt testat s\u00e5rbarheten i den aktuella versionen av webbl\u00e4saren Internet Explorer 11 med alla de senaste s\u00e4kerhetsuppdateringarna i Windows 7, Windows 10 och Windows Server 2012 R2.<\/p>\n

Den enda goda nyheten i att denna s\u00e5rbarhet avsl\u00f6jades f\u00f6r allm\u00e4nheten \u00e4r sannolikt att den tidigare dominerande marknadsandelen f\u00f6r Internet Explorer har minskat till ungef\u00e4r 7,34 %, enligt NetMarketShare. Men eftersom Windows anv\u00e4nder Internet Explorer som standardapplikation f\u00f6r att \u00f6ppna MHT-filer beh\u00f6ver anv\u00e4ndarna inte st\u00e4lla in IE som sin standardwebbl\u00e4sare, och de \u00e4r fortfarande s\u00e5rbara s\u00e5 l\u00e4nge IE finns kvar i deras system, och de inte \u00e4r uppm\u00e4rksamma p\u00e5 formatet av nedladdade filer fr\u00e5n internet.<\/p>\n

Den 27 mars meddelade John Microsoft om denna s\u00e5rbarhet i deras webbl\u00e4sare, men den 10 april fick forskaren ett svar fr\u00e5n f\u00f6retaget d\u00e4r de angav att de inte bed\u00f6mer problemet som kritiskt.<\/p>\n

\"En fix kommer att sl\u00e4ppas f\u00f6rst med n\u00e4sta produktversion,\" st\u00e5r det i Microsofts brev. \"F\u00f6r n\u00e4rvarande planerar vi inte att sl\u00e4ppa en l\u00f6sning f\u00f6r detta problem.\"<\/p>\n

Efter Microsofts klara respons publicerade forskaren detaljer om nolldagars-s\u00e5rbarheten p\u00e5 sin webbplats, samt demonstrationskod och video p\u00e5 YouTube.<\/p>\n<\/p>\n

\r\n \"Spela\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

\u00c4ven om implementeringen av denna s\u00e5rbarhet inte \u00e4r s\u00e5 enkel och kr\u00e4ver att anv\u00e4ndaren p\u00e5 n\u00e5got s\u00e4tt tvingas att k\u00f6ra en ok\u00e4nd fil i MHT-format, b\u00f6r denna s\u00e5rbarhet inte tas l\u00e4tt, trots avsaknaden av reaktion fr\u00e5n Microsoft. Hackergrupper har redan anv\u00e4nt MHT-filer f\u00f6r phishing och spridning av skadlig programvara tidigare, och det finns inget som hindrar dem fr\u00e5n att g\u00f6ra det nu. <\/p>\n

F\u00f6r att undvika denna och m\u00e5nga liknande s\u00e5rbarheter r\u00e4cker det att vara uppm\u00e4rksam p\u00e5 fil\u00e4ndelserna f\u00f6r de filer du f\u00e5r fr\u00e5n internet och kontrollera dem med ett antivirusprogram eller p\u00e5 webbplatsen VirusTotal. Som en extra s\u00e4kerhets\u00e5tg\u00e4rd kan du ocks\u00e5 st\u00e4lla in din favoritwebbl\u00e4sare, som \u00e4r olika fr\u00e5n Internet Explorer, som standardapplikation f\u00f6r filer med .mht eller .mhtml. Till exempel g\u00f6rs detta enkelt i Windows 10 via menyn \"V\u00e4lj standardappar f\u00f6r filtyper.\"<\/p>\n

\"Microsoft<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
K\u00e4lla: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c Windows, \u043c\u0438\u043d\u0443\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a Internet Explorer \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 MHTML, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31611","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft har valt att inte \u00e5tg\u00e4rda noll-dagars s\u00e5rbarheten i Internet Explorer | ProHoster","description":"Fredagen den 12 april publicerade s\u00e4kerhetsspecialisten John Page information om en icke \u00e5tg\u00e4rdad s\u00e5rbarhet i den aktuella versionen av Internet Explorer och visade ocks\u00e5 hur den kan utnyttjas.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Internet Explorer | ProHoster","og:description":"\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0414\u0436\u043e\u043d \u041f\u0435\u0439\u0434\u0436 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Internet Explorer, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0435\u0451 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-otkazalas-ispravlyat-uyazvimost-nulevogo-dnya-v-nbsp-internet-explorer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:10+00:00","article:modified_time":"2019-10-31T18:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31611","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:59:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:14:43","updated":"2026-01-21 06:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/31611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=31611"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/31611\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/23533"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=31611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=31611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=31611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}