- إنضم
- 16 فبراير 2009
- المشاركات
- 2,145
- الإعجابات
- 489
- النقاط
- 0
أكد أحد خبراء الأمن المعلوماتي في مايكروسوفت بوجود ثغرة في أنظمة ويندوز Windows 2000, XP, Vista, Server 2003, و Server 2008 تمكن المخترق من التحكم الكامل بالجهاز حيث يقوم المخترق بانشاء ملفات ضارة بامتداد EMF و WMF تستغل ثغرة في النظام وتحتوي على تعليمات برمجية تقوم بخادع النظام و المستخدم في أن واحد!
وصرح أيضا ألفريد هوغر (نائب الرئيس التنمية في مركز سيمانتيك) من امكانية استغلال امتدادات أخرى للتمويه مثل JPG.
وقال ولف جانج كاندك رئيس التقنية في كوالاس "قد تصلك رسالة عبر البريد أو الموقع تطلب منك تحميل الصورة ومن بعد تشغيلها سوف يتم اختراق نظامك بكل سهولة ومن غير أن تشعر"
ملاحظة: مايكروسوفت قامت بإرسال التحديثات لجميع الأجهزة وأنصح الجميع بالتحديث بأسرع وقت.
المصدر
http://www.isecur1ty.org/news/14-vulnerabilities/11-windows-wmf-emf-exploit.html
رغم ان الثغرة غير معروفة على الشبكة بشكل واسع الا اني حبيت اظيف
جميع تحديثات قفل الثغرة الموجودة حاليا
Microsoft Windows Server 2003 Datacenter Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows XP Media Center Edition SP2
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows Server 2003 Itanium SP1
* Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=04be3d7e-7dda -4dca-887a-e7a8156ede1c
Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
* Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=04be3d7e-7dda -4dca-887a-e7a8156ede1c
Microsoft Windows Vista x64 Edition 0
* Microsoft Security Update for Windows Vista for x64-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=0fcac480-d6db -4a94-8c7d-b7319282cf56
Microsoft Windows Server 2003 Datacenter x64 Edition SP2
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Vista Home Basic SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows XP Tablet PC Edition SP2
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows XP Media Center Edition SP3
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows Server 2003 *** Edition SP2
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Vista Home Premium
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 Standard Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Server 2003 x64 SP1
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Vista Enterprise
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows XP Professional x64 Edition SP2
* Microsoft Security Update for Windows XP x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=d0d704c6-48c2 -4907-b6c3-2455d7cf21c8
Microsoft Windows Vista 0
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Vista Business
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 x64 SP2
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Vista x64 Edition SP1
* Microsoft Security Update for Windows Vista for x64-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=0fcac480-d6db -4a94-8c7d-b7319282cf56
Microsoft Windows Vista Ultimate SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 Enterprise x64 Edition
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows XP Tablet PC Edition SP3
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows Server 2003 Datacenter x64 Edition
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Server 2003 Enterprise Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Vista SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2008 for x64-based Systems 0
* Microsoft Security Update for Windows Server 2008 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ec15acc4-3e0f -4414-9383-61c122ff1382
Microsoft Windows Vista Home Basic
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Vista Business SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows 2000 Advanced Server SP4
* Microsoft Security Update for Windows 2000 (KB958690)
http://www.microsoft.com/downloads/d...=98bb7d40-89a0 -470a-8eb7-06f15072a635
Microsoft Windows Vista Ultimate
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
3DM Software Disk Management Software SP2
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Vista Home Premium SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 Standard Edition SP2
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
وصرح أيضا ألفريد هوغر (نائب الرئيس التنمية في مركز سيمانتيك) من امكانية استغلال امتدادات أخرى للتمويه مثل JPG.
وقال ولف جانج كاندك رئيس التقنية في كوالاس "قد تصلك رسالة عبر البريد أو الموقع تطلب منك تحميل الصورة ومن بعد تشغيلها سوف يتم اختراق نظامك بكل سهولة ومن غير أن تشعر"
ملاحظة: مايكروسوفت قامت بإرسال التحديثات لجميع الأجهزة وأنصح الجميع بالتحديث بأسرع وقت.
المصدر
http://www.isecur1ty.org/news/14-vulnerabilities/11-windows-wmf-emf-exploit.html
رغم ان الثغرة غير معروفة على الشبكة بشكل واسع الا اني حبيت اظيف
جميع تحديثات قفل الثغرة الموجودة حاليا
Microsoft Windows Server 2003 Datacenter Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows XP Media Center Edition SP2
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows Server 2003 Itanium SP1
* Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=04be3d7e-7dda -4dca-887a-e7a8156ede1c
Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
* Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=04be3d7e-7dda -4dca-887a-e7a8156ede1c
Microsoft Windows Vista x64 Edition 0
* Microsoft Security Update for Windows Vista for x64-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=0fcac480-d6db -4a94-8c7d-b7319282cf56
Microsoft Windows Server 2003 Datacenter x64 Edition SP2
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Vista Home Basic SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows XP Tablet PC Edition SP2
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows XP Media Center Edition SP3
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows Server 2003 *** Edition SP2
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Vista Home Premium
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 Standard Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Server 2003 x64 SP1
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Vista Enterprise
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows XP Professional x64 Edition SP2
* Microsoft Security Update for Windows XP x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=d0d704c6-48c2 -4907-b6c3-2455d7cf21c8
Microsoft Windows Vista 0
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Vista Business
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 x64 SP2
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Vista x64 Edition SP1
* Microsoft Security Update for Windows Vista for x64-based Systems (KB958690)
http://www.microsoft.com/downloads/d...=0fcac480-d6db -4a94-8c7d-b7319282cf56
Microsoft Windows Vista Ultimate SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 Enterprise x64 Edition
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows XP Tablet PC Edition SP3
* Microsoft Security Update for Windows XP (KB958690)
http://www.microsoft.com/downloads/d...=e09641ba-6cbe -4095-82b5-703d3a7dc33b
Microsoft Windows Server 2003 Datacenter x64 Edition
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ecf75c70-8489 -41ad-9759-3a07e13957be
Microsoft Windows Server 2003 Enterprise Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Vista SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2008 for x64-based Systems 0
* Microsoft Security Update for Windows Server 2008 x64 Edition (KB958690)
http://www.microsoft.com/downloads/d...=ec15acc4-3e0f -4414-9383-61c122ff1382
Microsoft Windows Vista Home Basic
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Vista Business SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows 2000 Advanced Server SP4
* Microsoft Security Update for Windows 2000 (KB958690)
http://www.microsoft.com/downloads/d...=98bb7d40-89a0 -470a-8eb7-06f15072a635
Microsoft Windows Vista Ultimate
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
3DM Software Disk Management Software SP2
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
Microsoft Windows Vista Home Premium SP1
* Microsoft Security Update for Windows Vista (KB958690)
http://www.microsoft.com/downloads/d...=4b1aaaba-f355 -4265-83c0-50b901856ced
Microsoft Windows Server 2003 Standard Edition SP2
* Microsoft Security Update for Windows Server 2003 (KB958690)
http://www.microsoft.com/downloads/d...=f5cfb8da-e7cc -4183-8631-507c2a406500
