 Hom 10/12, Microsoft lai phai xac nhan them mot loi bao mat zero-day
nua trong Word 2003. Day la loi bao mat thu hai duoc phat hien trong Word chi
trong vong chua den mot tuan le.
Microsoft cho biet loi bao mat nay co the bi tin tac loi dung de tu xa doat
quyen truy cap vao he thong su dung cac phien ban Word mac loi nhu Word 2000,
Word 2002, Word 2003 va Word Viewer 2003. Rieng Word 2007 khong mac loi nay.
"Theo nhung ket qua nghien cuu ban dau chung toi xac nhan day la mot loi
bao mat hoan toan moi. Tuy nhien, kha nang loi nay bi loi dung khai thac tan
cong muc tieu la tuong doi han che".
Hang bao mat Secunia hom qua da quyet dinh dan nhan loi bao mat nay o muc do "cuc
ky nguy hiem" boi day la loi van chua duoc khac phuc va da bi tin tac loi dung
khai thac de tan cong nguoi dung.
Theo Secunia, loi bao mat moi trong Word phat sinh tu mot loi trong qua trinh xu
ly cac tep tin cua ung dung. Mot so nguoi cho rang loi nay tuong doi giong voi
loi tran bo nho dem da duoc hang bao mat eEye phat hien truoc do.
Nhung Microsoft khang dinh loi bao mat nay hoan toan khac voi loi bao mat trong
Word da duoc phat hien tu cuoi tuan truoc.
De co the khai thac loi bao mat nay ke tan cong phai lua nguoi dung mo mot tep
tin Word doc hai duoc luu tru tren mot trang web nao do hoac duoc gui kem theo
email.
Microsoft hien chua cong bo bat ky ke hoach nao ve viec khac phuc loi bao mat
nay.
Theo VnMedia Article source http://w4rum.com/455.t
| 