Cac chuyen gia bao mat canh bao
nguoi dung OpenOffice nen that su can than sau khi vua co 3 lo hong bao mat
trong bo ung dung nay duoc tiet lo.
Hang bao mat Secunina xep nhung loi tren vao muc "cuc ky nguy hiem" - muc cao
nhat trong cac nac thang danh gia muc do nguy hiem cua loi bao mat.
Nhung loi bao mat tren hoan toan co the bi loi dung de to chuc cac vu tan cong
tu choi dich vu hoac thuc thi ma doc tren he thong mac loi.
Loi bao mat dau tien thuoc ve ung dung bang tinh StarCalc cua bo OpenOffice. Tin
tac co the su dung mot tep tin StarCalc co cay ma khai thac de tan cong va doat
quyen thuc thi ma doc tren he thong cua nguoi dung. Loi nay do Secunia phat hien
va thong bao.
 Loi
bao mat thu hai phat sinh trong phuong thuc xu ly tep tin WordPerfect (.wpd) cua
OpenOffice. Loi nay duoc phat hien boi iDefense. Phuong thuc khai thac loi van
la: "Tin tac lua nguoi dung mo mot tep tin WPD doc hai nham kich hoat ma
khai thac loi duoc cay trong do cho phep chung doat duoc quyen thuc thi ma doc
tren he thong cua ho".
Loi bao mat thu ba lai cho phep tin tac duoc phep thuc thi cau lenh ma nhi phan
truc tiep trong OpenOffice. Nhom phat trien Linux Debian cho biet de tan cong
nguoi dung tin tac se tao ra mot lien ket doc hai nhung san vao trong mot tep
tin va gui den cho nguoi dung. Neu nguoi dung nhap chuot vao lien ket do ho se
tro thanh nan nhan cua chung.
Secunia khuyen cao nguoi dung khong nen mo cac tep tin OpenOffice co nguon goc
khong ro rang.
Theo Vnunet, VnMedia
Article source http://w4rum.com/949.t
| 