Cac chuyen gia bao mat cua
McAfee cho biet ho lai vua phat hien duoc ba loi bao mat moi chua duoc va trong
bo ung dung van phong Microsoft Office.
Thong tin dang tai tren McAfee Avert Labs Blog ngay hom qua (10/4) thong tin ve
nhung loi bao mat noi tren da duoc dang tai tren mot so dien dan bao mat. Trong
so nay co nhung loi co the bi loi dung de thuc thi ma doc tu xa.
Ket qua dieu tra buoc dau cho thay trong nhung loi bao mat noi tren co mot loi
cho phep tan cong tu choi dich vu. Dieu nay dong nghia voi viec Office co the bi
treo cung neu bi tan cong.
"Do la mot loi tran bo nho dem. Loi nay co the bi khai thac de tu xa thuc
thi ma doc tren he thong muc tieu," chuyen gia nghien cuu bao mat Karthik
Raman cho biet. Hinh thuc tan cong chu yeu se la phat tan mot tep tin Office co
cay ma khai thac loi va lua nguoi dung mo no ra.
 McAfee
Avert Labs cho biet dang tien hanh nghien cuu them nhung loi tren. Day cung la
khang dinh cua dai dien Microsoft trong mot tuyen bo gui di hom qua. Microsoft
hien chua ghi nhan duoc bat ky mot vu tan cong nao thong qua viec loi dung khai
thac nhung loi tren.
Thong tin ve nhung loi bao mat zero-day moi trong Office duoc tiet lo dung vao
ngay Microsoft phat hanh ban cap nhat dinh ky thang 4. Khong nhung the Microsoft
con dang phai giai quyet cac hau qua cua ban cap nhat bao mat khan cap va loi
Windows ANI phat hanh tuan truoc.
Dieu nay dong nghia voi viec nguoi dung se co mot thang khong duoc bao ve va
phai doi dien voi nguy co bi tan cong bat cu luc nao," Raman canh bao.
Tin tac hien da biet cach loi dung thong tin tu ban cap nhat dinh ky hang thang
de to chuc tan cong nguoi dung. Thong thuong cha bao lau sau khi Microsoft phat
hanh ban cap nhat dinh ky hang thang thi tin tac se tung ra ma khai thac cac loi
nham muc tieu tan cong nhung nguoi dung chua cai dat ban va loi.
Tuy nhien, nhung loi duoc phat hien lan nay co the khong phai la loi bao mat moi,
ong Dave Marcus - Giam doc truyen thong va nghien cuu bao mat cua McAfee - cho
biet. "Doi khi nhung gi ma nguoi ta tuyen bo la loi zero-day lai chi la
nhung loi da duoc va tu lau roi".
Theo CNet, VnMedia
Article source http://w4rum.com/1264.t
| 