Microsoft canh bao loi Zero-day chua va trong phan mem soan thao van ban co the bi hacker khai thac de chay chuong trinh nguy hiem tren may tinh nan nhan. Nguoi dung can can trong khi mo file Word dinh kem trong e-mail hoac duoc gui qua cac phuong tien Internet khac. Loi nay bi loi dung bang cach chen them mot xau ky tu trong van ban Word, khien cho bo nho cua PC bi sai lech va cho phep ke tan cong tuy y thuc thi cac chuong trinh. Cac phien ban Word 2000, 2002, 2003, Word Viewer 2003, Microsoft Works deu co nguy co bi khai thac. Hien nay, hacker co xu huong tap trung vao cac chuong trinh co lo hong va chua duoc va. Hanh dong nay duoc goi la "tan cong Zero-day", khien nan nhan tro tay khong kip. Bo ung dung van phong cua Microsoft dang duoc hacker nhom ngo vi chua nhieu loi hon ca he dieu hanh Windows. "Toi pham mang biet rang loi Zero-day rat dang gia va chung co the khai thac de kiem duoc nhieu tien", Cesar Cerrudo, Giam doc hang bao mat Argeniss (Argentina), nhan xet. "Chung se dinh kem Trojan, phan mem gian diep de lay thong tin va mat khau". Trang bao mat FrSIRT da dua lo hong nay vao cap do canh bao "nghiem trong". Microsoft se phat hanh ban cap nhat cho Word vao 12/12 toi. Theo InfoWorld Article source http://w4rum.com/419.t
|