Dung theo lich trinh Microsoft hom qua (10/4) phat
hanh ban cap nhat bao mat dinh ky hang thang de khac phuc cac lo hong bao mat
trong cac phan mem ung dung cua hang.
Ban cap nhat bao mat thang 4 bao gom 5 ban va lon khac phuc tong cong 8 loi bao
mat trong cac san pham cua Microsoft. Trong so nhung loi nay co mot loi zero-day
cuc ky nguy hiem trong he dieu hanh Windows. Tham chi Vista cung mac loi
zero-day do.
Trong so 4 ban va lon gianh cho Windows thi da co 3 ban duoc xep vao muc "cuc ky
nguy hiem" - muc cao nhat trong thang bac danh gia muc do nguy hiem cac loi bao
mat cua Microsoft. Ban con lai xep o muc thap hon mot bac.
Loi zero-day trong he dieu hanh Windows duoc khac phuc lan nay da duoc phat hien
tu hoi thang 12 nam ngoai. Buoc dau khi moi phat hien cac chuyen gia bao mat deu
cho rang loi nay khong he nguy hiem boi no chi co the bi loi dung neu tin tac co
quyen truy cap truc tiep voi he thong mac loi.
Tuy nhien, Microsoft lai cho rang loi nay co the bi tan cong neu nguoi dung truy
cap vao mot trang web doc co cay ma khai thac. Hau qua la tin tac se chiem duoc
quyen dieu khien day du he thong mac loi.
 Loi
zero-day noi tren cung ton tai trong phien ban he dieu hanh moi nhat Vista.
Microsoft khuyen cao moi nguoi dung nen nhanh chong cai dat ban va loi nay cang
som cang tot.
Mot loi nguy hiem khac cung duoc khac phuc trong dot nay la loi trong Microsoft
Agent tren cac phien ban Windows 2000 va Windows Server 2003. Loi nay cung co
the bi khai thac bang cach lua nguoi dung truy cap vao trong mot trang web doc
hai.
Windows XP dot nay cung duoc bit mot lo hong nua trong tinh nang
"plug-and-play". Loi nay co the bi khai thac ma khong can bat ky su tuong tac
nao tu phia nguoi dung. Tuy nhien de co the tan cong thi tin tac phai o chung
trong mot he thong mang voi he thong mac loi. Thanh cong thi tin tac co the vo
hieu hoa duoc ca tuong lua tren he thong muc tieu.
Ban va lon thu 5 khac phuc hai loi bao mat trong Content Management Server.
Trong so nay co mot loi duoc xep vao muc cuc ky nguy hiem. Neu khai thac thanh
cong tin tac co the doat duoc quyen dieu khien cac website tren may chu.
Microsoft khuyen cao nguoi dung nen nhanh chong tai ve va cai dat cac ban va loi
can thiet cang som cang tot.
Theo CNet, VnMedia Article source http://w4rum.com/1261.t
| 