Novo

Forum kao aplikacija na telefonu

Dodajte forum na početni ekran i koristite ga kao aplikaciju, sa menijem na dnu ekrana.

  • 9 odgovora
  • 3.710 pregleda

Najnovija ↓

Internet Explorer 7,8,9 pod napadom 18.09.2012. u 13:34 · pre 171 mesec #1


Imamo novi 0-day napad na IE od autora koji su prethodnih nedelja napadali javu.

Naravno nadam se da ne koristite IE već Google Chrome eventualno Firefox.

Ipak,ovaj tekst na Ars Technici ima jedan značajan citat:
Citat:
Even when people don't actively use IE, many utilities and third-party applications make use of IE code. That opens the possibility that people on public WiFi systems and other unsecured networks could inject malicious code into a victim's Web traffic in an attempt to exploit the vulnerability.

"Just keep in mind that even if you don't use IE for day-to-day browsing, a lot of tools you use do embed IE and those are vulnerable," Moore said
.

Microsoft je noćas objavio Microsoft Security Advisory (2757760) obratite pažnju na sekciju Suggested Actions.

Potpis
If you didn't go looking for it, don't install it. If you do install it, make sure you update it. And if
you no longer need it, remove it.
Re: Internet Explorer 7,8,9 pod napadom 18.09.2012. u 14:26 · pre 171 mesec #2
Citat:
Suggested Actions

Apply Workarounds

Workarounds refer to a setting or configuration change that does not correct the underlying issue but would help block known attack vectors before a security update is available. See the next section, Workarounds, for more information.Deploy the Enhanced Mitigation Experience Toolkit

Enhanced Mitigation Experience Toolkit (EMET) is a utility that helps prevent vulnerabilities in software from successfully being exploited by applying in-box mitigations such as DEP to applications configured in EMET.

At this time, EMET is provided with limited support and is only available in the English language. For more information, see Microsoft Knowledge Base Article 2458544.

Configure EMET for Internet Explorer from the EMET user interface

To add iexplore.exe to the list of applications using EMET, perform the following steps:

Click Start, All Programs, Enhanced Mitigation Experience Toolkit, and EMET 3.0.
Click Yes on the UAC prompt, click Configure Apps, then select Add. Browse to the application to be configured in EMET.

For 32-bit installations of Internet Explorer the location is:
C:\Program Files (x86)\Internet Explorer\iexplore.exe

Note For 32-bit systems, the path is c:\program files\Internet Explorer\iexplore.exe

For 64-bit installations of Internet Explorer the location is:
C:\Program Files\Internet Explorer\iexplore.exe
Click OK and exit EMET.

Download:
Enhanced Mitigation Experience Toolkit v3.0
http://www.microsoft.com/en-us/download/details.aspx?id=29851

Enhanced Mitigation Experience Toolkit v3.5 Tech Preview
http://www.microsoft.com/en-us/download/details.aspx?id=30424
Re: Internet Explorer 7,8,9 pod napadom 18.09.2012. u 18:11 · pre 171 mesec #3
Ovaj EMET je lepa stvarčica i pod njegovu zaštitu sam stavio sve .exe fajlove programa koji imaju internet pristup:pretraživače,playere,flash,javu(dok sam je imao),office programe,mail klijent(dok sam ga imao),uTorrent,pdf viewer...
Potpis
If you didn't go looking for it, don't install it. If you do install it, make sure you update it. And if
you no longer need it, remove it.
Re: Internet Explorer 7,8,9 pod napadom 20.09.2012. u 03:09 · pre 171 mesec #5
Citat:
Vodomar:
Ovaj EMET je lepa stvarčica i pod njegovu zaštitu sam stavio sve .exe fajlove programa koji imaju internet pristup:pretraživače,playere,flash,javu(dok sam je imao),office programe,mail klijent(dok sam ga imao),uTorrent,pdf viewer...


A sta radis sa sajtevima i ostalim glupostima koji ne sljakaju bez jave? Interesuje me jer me opasno smara ta java i imam osecaj da losije radi racunar sa njom.. Mozda je glupo pitanje, al ko pita ne skita :)
Re: Internet Explorer 7,8,9 pod napadom 20.09.2012. u 09:26 · pre 171 mesec #6
vidi temu Vanredni Java update prvi post.
Potpis
If you didn't go looking for it, don't install it. If you do install it, make sure you update it. And if
you no longer need it, remove it.
Re: Internet Explorer 7,8,9 pod napadom 21.09.2012. u 15:49 · pre 171 mesec #8
zaštita procesa bez emeta i podešavanje internet zona bez korisnika ali sačekaću update verovatno večeras posle 19h
Potpis
If you didn't go looking for it, don't install it. If you do install it, make sure you update it. And if
you no longer need it, remove it.
Tema je zaključana, nove poruke nisu moguće.

Premeštanje teme