Amaya Toman White Hat hackers vakawana zvikanganiso zviviri zvekuchengetedza muSafari browser pamusangano wekuchengetedza muVancouver. Imwe yacho inotokwanisa kugonesa mvumo yayo kusvika pakutora kutonga kwakazara kweMac yako. Yekutanga yemabhugi akawanikwa akakwanisa kusiya bhokisi rejecha - chiyero chekuchengetedza chinobvumira maapplication kuwana ega uye system data.
Makwikwi aya akatanga nechikwata cheFluoroacetate, icho nhengo dzaro dzaive Amat Cama naRichard Zhu. Chikwata chakanangana neSafari web browser, chakabudirira kurwisa ndokusiya sandbox. Kuvhiya kwacho kwose kwakatora inenge nguva yose yakanga yagoverwa nokuda kwechikwata. Iyo kodhi yakangobudirira kechipiri, uye kuratidza bug yakawana Team Fluoroacetate $55K uye 5 mapoinzi akananga kuna Master of Pwn zita.
Yechipiri bug yakaratidza inobvumirwa midzi uye kernel kupinda paMac. Iyo bug yakaratidzwa nephoenhex & qwerty timu. Ndichiri kubhurawuza yavo webhusaiti, nhengo dzechikwata dzakakwanisa kumisikidza JIT bug ichiteverwa nenhevedzano yemabasa anotungamira kune yakazara system kurwisa. Apple yaiziva nezveimwe yezvipembenene, asi kuratidza tsikidzi kwakawana vatori vechikamu $45 uye 4 mapoinzi akananga kuna Master of Pwn zita.
Murongi wemusangano uyu ndiTrend Micro pasi pechirongwa cheZero Day initiative (ZDI). Chirongwa ichi chakagadzirwa kuti chikurudzire matsotsi kuti ataure zvakavanzika zvakanangana nemakambani pane kuti azvitengese kuvanhu vasiri ivo. Mibairo yemari, kubvuma uye mazita anofanira kunge ari kukurudzira kwevanobira.
Mapato anofarira anotumira ruzivo rwakakosha zvakananga kuZDI, iyo inounganidza data inodiwa nezve mupi. Vatsvaguri vakasevenzeswa zvakananga nekutanga vanozotarisa zvinokurudzira mumarabhoritari ekuyedza uye vozopa mubairo. Inobhadharwa pakarepo mushure mekubvumirwa kwayo. Pazuva rekutanga, ZDI yakabhadhara mari inodarika mazana maviri nemakumi mana ezviuru zvemadhora kune nyanzvi.
Safari inzvimbo yakajairika yekupinda yevanobira. Pamusangano wegore rapfuura, semuenzaniso, bhurawuza rakashandiswa kutora kutonga kweTouch Bar paMacBook Pro, uye nezuva rimwe chetero, vaive pachiitiko ichi vakaratidza kumwe kurwiswa kwebrowser.
Kunobva: Iye ZDI
