Cac bao cao moi nhat khang dinh
loi trong ung dung thu dien tu cua Vista co the giup hacker chiem quyen dieu
khien may tinh tu xa. Microsoft cho biet ho dang nghien cuu cac bao cao nay.
Windows Mail la ung dung thu dien tu va nhom tin (newsgroup) co san trong he
dieu hanh Vista cua Microsoft. Gan day, mot so nghien cuu duoc cong bo tren
internet khang dinh ung dung nay co loi bao mat, co the bi hacker khai thac de
tan cong tu xa.
“Microsoft se tiep tuc nghien cuu cac bao cao nay de cung cap huong dan bo
sung cho khach hang o muc can thiet. Khi viec dieu tra hoan tat, Microsoft se co
hanh dong thich hop de bao ve khach hang, co the bao gom mot so loi khuyen ve
bao mat hoac mot ban nang cap bao mat kem theo phan cap nhat hang thang, tuy
thuoc vao nhu cau cua khach hang.”
 Microsoft
dong thoi khuyen cao nguoi su dung nen can trong toi da khi mo cac duong dan
trong thu dien tu, du ro nguon goc hay khong.
Mot hacker co nick name “Kingcope” da cong bo mot doan ma PoC (proof-of-concept,
mot cach noi khac chi loi “zero-day”) de chung minh rang viec thuc thi ma doc tu
xa khi nguoi su dung mo cac duong link nguy hiem la hoan toan co the.
“Vi du, nan nhan co mot thu muc tai o C:\ duoc dat ten la “blah” va mot
batch script ten la “blah.bat” cung tai o C:\. Bay gio neu nan nhan click vao
link trong thu dien tu dan toi C:\blah thi file blah.bat se duoc thuc thi ma
khong can hoi.”
Microsoft cho biet nhung khach hang nghi ngo minh bi anh huong co the lien he
voi dich vu ho tro san pham cua ho qua trang web:
http://support.microsoft.com/security
Theo InformationWeek, Tuoi Tre Online
Article source http://w4rum.com/1082.t
| 