¡¾Ô¤¾¯Í¨¸æ¡¿IEºÍEdgeä¯ÀÀÆ÷0-dayÎó²î ¿ÉÔì³ÉͨÓÃÐÍ¿çÕ¾¾ç±¾¹¥»÷
2019-04-02
¿ËÈÕ£¬ÍâÑóÑо¿Ô±Ðû²¼Á˹ØÓÚMicrosoft EdgeºÍInternet Explorerä¯ÀÀÆ÷µÄ0-dayÎó²î¡£¹¥»÷Õß¿ÉÒÔʹÓøÃÎó²îÈÆ¹ýÕâ2¿îä¯ÀÀÆ÷µÄͬԴսÂÔ£¨Same-Origin Policy£©£¬ÔÚÓû§µã»÷Á˹¥»÷ÕßÌṩµÄ¶ñÒâÁ´½Óºó£¬Ôì³ÉͨÓÃÐÍ¿çÕ¾¾ç±¾¹¥»÷£¨UXSS£©£¬ÍµÈ¡Óû§µÄÃô¸ÐÐÅÏ¢
ÊÜÓ°ÏìµÄ°æ±¾
- ÏÖÔÚ×îа汾µÄIEºÍEdgeä¯ÀÀÆ÷¾ùÊÜÓ°Ïì
½â¾ö¼Æ»®
×èÖ¹±¾Í¨¸æÐû²¼Ê±£¬Microsoft¹Ù·½»¹Î´ÐÞ¸´ÉÏÊöÎó²î¡£
½¨ÒéÓû§²»ÒªÈÝÒ×µã»÷ȪԴ²»Ã÷µÄÁ´½Ó£¬Í¬Ê±ÔÚ¹Ù·½Î´ÐÞ¸´Ç°£¬¿ÉÒÔÖ»¹Ü×èֹʹÓÃIEÒÔ¼°Edgeä¯ÀÀÆ÷¡£
²Î¿¼Á´½Ó£º
https://thehackernews.com/2019/03/microsoft-edge-ie-zero-days.html
https://twitter.com/Windowsrcer/status/1111386034439229440
Éù Ã÷
±¾Ç徲ͨ¸æ½öÓÃÀ´ÐÎò¿ÉÄܱ£´æµÄÇå¾²ÎÊÌ⣬¾ÅÓÎÀÏ¸ç¿Æ¼¼²»Îª´ËÇ徲ͨ¸æÌṩÈκΰü¹Ü»òÔÊÐí¡£ÓÉÓÚÈö²¥¡¢Ê¹ÓôËÇ徲ͨ¸æËùÌṩµÄÐÅÏ¢¶øÔì³ÉµÄÈκÎÖ±½Ó»òÕß¼ä½ÓµÄЧ¹û¼°Ëðʧ£¬¾ùÓÉʹÓÃÕß×Ô¼ºÈÏÕæ£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÒÔ¼°Ç徲ͨ¸æ×÷Õß²»Îª´Ë¼ç¸ºÈκÎÔðÈΡ£¾ÅÓÎÀÏ¸ç¿Æ¼¼ÓµÓжԴËÇ徲ͨ¸æµÄÐÞ¸ÄÏ¢ÕùÊÍȨ¡£ÈçÓû×ªÔØ»òÈö²¥´ËÇ徲ͨ¸æ£¬±ØÐè°ü¹Ü´ËÇ徲ͨ¸æµÄÍêÕûÐÔ£¬°üÀ¨°æÈ¨ÉùÃ÷µÈËùÓÐÄÚÈÝ¡£Î´¾¾ÅÓÎÀÏ¸ç¿Æ¼¼ÔÊÐí£¬²»µÃí§ÒâÐ޸ĻòÕßÔö¼õ´ËÇ徲ͨ¸æÄÚÈÝ£¬²»µÃÒÔÈκη½·¨½«ÆäÓÃÓÚÉÌҵĿµÄ¡£
¹ØÓÚ¾ÅÓÎÀÏ¸ç¿Æ¼¼
±±¾©ÉñÖݾÅÓÎÀϸçÐÅÏ¢Çå¾²¿Æ¼¼¹É·ÝÓÐÏÞ¹«Ë¾£¨¼ò³Æ¾ÅÓÎÀÏ¸ç¿Æ¼¼£©½¨ÉèÓÚ2000Äê4Ô£¬×ܲ¿Î»ÓÚ±±¾©¡£ÔÚº£ÄÚÍâÉèÓÐ30¶à¸ö·ÖÖ§»ú¹¹£¬ÎªÕþ¸®¡¢ÔËÓªÉÌ¡¢½ðÈÚ¡¢ÄÜÔ´¡¢»¥ÁªÍøÒÔ¼°½ÌÓý¡¢Ò½ÁƵÈÐÐÒµÓû§£¬Ìṩ¾ßÓн¹µã¾ºÕùÁ¦µÄÇå¾²²úÆ·¼°½â¾ö¼Æ»®£¬×ÊÖú¿Í»§ÊµÏÖÓªÒµµÄÇ徲˳³©ÔËÐС£
»ùÓÚ¶àÄêµÄÇå¾²¹¥·ÀÑо¿£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÔÚÍøÂç¼°ÖÕ¶ËÇå¾²¡¢»¥ÁªÍø»ù´¡Çå¾²¡¢ºÏ¹æ¼°Çå¾²ÖÎÀíµÈÁìÓò£¬Îª¿Í»§ÌṩÈëÇÖ¼ì²â/·À»¤¡¢¿¹¾Ü¾ø·þÎñ¹¥»÷¡¢Ô¶³ÌÇå¾²ÆÀ¹ÀÒÔ¼°WebÇå¾²·À»¤µÈ²úÆ·ÒÔ¼°×¨ÒµÇå¾²·þÎñ¡£
±±¾©ÉñÖݾÅÓÎÀϸçÐÅÏ¢Çå¾²¿Æ¼¼¹É·ÝÓÐÏÞ¹«Ë¾ÓÚ2014Äê1ÔÂ29ÈÕÆðÔÚÉîÛÚ֤ȯÉúÒâËù´´Òµ°åÉÏÊÐÉúÒ⣬¹ÉƱ¼ò³Æ£º¾ÅÓÎÀÏ¸ç¿Æ¼¼£¬¹ÉƱ´úÂ룺300369¡£

¾ÅÓÎÀϸçÔÆ





