{"id":3928,"date":"2013-01-16T15:27:48","date_gmt":"2013-01-16T07:27:48","guid":{"rendered":"https:\/\/blog.trendmicro.com.tw\/?p=3928"},"modified":"2013-01-17T15:36:22","modified_gmt":"2013-01-17T07:36:22","slug":"%e9%87%8d%e5%a4%a7%e8%b3%87%e5%ae%89%e9%a2%a8%e9%9a%aa%e9%80%9a%e5%a0%b1-java%e9%9b%b6%e6%99%82%e5%b7%ae%e6%bc%8f%e6%b4%9e%e7%9a%84%e9%98%b2%e8%ad%b7%e5%8f%8a%e5%bb%ba%e8%ad%b0%e8%99%95%e8%a3%a1","status":"publish","type":"post","link":"https:\/\/blog.trendmicro.com.tw\/?p=3928","title":{"rendered":"\u91cd\u5927\u8cc7\u5b89\u98a8\u96aa\u901a\u5831—-Java\u96f6\u6642\u5dee\u6f0f\u6d1e\u7684\u9632\u8b77\u53ca\u5efa\u8b70\u8655\u88e1\u884c\u52d5"},"content":{"rendered":"\n\n\n\n\n
<\/td>\n\n

\u00a0<\/b><\/p>\n<\/td>\n<\/tr>\n

\n
\n
\n<\/div>\n<\/td>\n<\/tr>\n
\u65e5\u524d\uff082013 \u5e741 \u670810 \u65e5\uff09\uff0c\u91dd\u5c0dJava\u7cfb\u7d71\u5f31\u9ede\u7684\u96f6\u6642\u5dee\u653b\u64ca\uff08Zero-Day Exploit\uff09 \u7206\u767c\u3002\u9019\u8d77\u653b\u64ca\u4e8b\u4ef6\u80cc\u5f8c\u662f\u7531\u985e\u4f3c\u9ed1\u6d1e\u6f0f\u6d1e\u653b\u64ca\u7d44\u7e54\uff08Black Hole Exploit Kit, BHEK\uff09 \u6240\u767c\u8d77\uff0c\u4e26\u85c9\u6b64\u6563\u64ad\u60e1\u610f\u52d2\u7d22\u8edf\u9ad4 Ransomware<\/a>\u2014Reveton\u3002\uff08\u95dc\u65bc\u52d2\u8d16\u8edf\u9ad4\u76f8\u95dc\u4ecb\u7d39\uff0c\u8acb\u53c3\u8003\u7dda \u4e0a\u5c0f\u5b78\u5802<\/a>\u3002\uff09<\/p>\n

\u7532\u9aa8\u6587\u5b98\u65b9\u5df2\u65bc2013 \u5e741 \u670813 \u65e5\u767c\u4f48\u7dca\u6025\u66f4\u65b0Java 7 update 11<\/a>\u3002\u91dd\u5c0d\u6b64\u6b21\u7684\u96f6 \u6642\u5dee\u653b\u64ca\uff0c\u8da8\u52e2\u79d1\u6280\u7522\u54c1Deep Security\u8207Intrusion Defense Firewall\uff08IDF\uff09\u6f0f\u6d1e\u898f \u5247\u7de8\u865f1005177 Restrict Java Bytecode File (Jar\/Class) Download\u65e9\u5c31\u53ef\u70ba\u7528\u6236\u63d0\u4f9b\u5b8c \u5584\u7684\u9632\u8b77\uff1b\u66f4\u57282013\u5e741 \u670811 \u65e5\u91cb\u51fa\u66f4\u65b0\u6a94DSRU13-002 \u52a0\u5f37\u9632\u7bc4\u91dd\u5c0dJava\u5f31\u9ede \u6240\u6709\u53ef\u80fd\u7684\u653b\u64ca\u3002Deep Security\u4e5f\u53ef\u900f\u904e\u4ee5\u4e0b\u7684DPI\u898f\u5247\u9632\u7bc4\u7db2\u8def\u653b\u64ca\uff1a<\/p>\n\n\n\n\n\n\n
\n

\u898f\u5247\u7de8\u865f<\/b><\/p>\n<\/td>\n

\n

\u898f\u5247\u540d\u7a31<\/b><\/p>\n<\/td>\n

\n

\u9632\u7bc4\u5f31\u9ede\u7de8\u865f<\/b><\/p>\n<\/td>\n<\/tr>\n

\n

1004711<\/p>\n<\/td>\n

Identified Malicious Java JAR Files<\/td>\n\n

CVE-2013-0422<\/p>\n<\/td>\n<\/tr>\n

\n

1005331<\/p>\n<\/td>\n

Ruby On Rails XML Processor YAML Deserialization DoS<\/td>\n\n

CVE-2013-0156<\/p>\n<\/td>\n<\/tr>\n

\n

1005328<\/p>\n<\/td>\n

Ruby On Rails XML Processor YAML Deserialization Code Execution Vulnerability<\/td>\n\n

CVE-2013-0156<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u6b64\u5916\uff0c\u8da8\u52e2\u79d1\u6280PC-cillin 2013<\/b><\/a>\u96f2\u7aef\u7248<\/b>\u3001WFBS\u3001OfficeScan \u7b49\u7522\u54c1\u75c5\u6bd2\u78bc\u66f4\u65b0\u81f3\u7248\u672c9.649.00 \u4ee5\u4e0a\uff0c\u4e5f\u80fd\u53d6\u5f97\u5b8c\u6574\u7684\u5b89\u5168\u9632\u8b77\uff0c\u4e26\u53ef\u5075\u6e2c\u4ee5\u4e0b\u76f8\u95dc\u60e1\u610f\u7a0b\u5f0f\/\u7db2\u7ad9\uff1a<\/p>\n

\n\n\n\n\n\n\n\n
\n

\u60e1\u610f\u7a0b\u5f0f\/\u7db2\u9801\u5075\u6e2c\u540d\u7a31<\/b><\/p>\n<\/td>\n

\n

\u5075\u6e2c\u63cf\u8ff0<\/b><\/p>\n<\/td>\n<\/tr>\n

\n

JAVA_EXPLOIT.RG<\/p>\n<\/td>\n

\n

\u60e1\u610f\u7a0b\u5f0f\u78bc<\/p>\n<\/td>\n<\/tr>\n

\n

HTML_EXPLOIT.RG<\/p>\n<\/td>\n

\n

\u85cf\u6709\u60e1\u610f\u7a0b\u5f0f\u78bc\u7684\u7db2\u7ad9<\/p>\n<\/td>\n<\/tr>\n

\n

TROJ_REVETON.RG<\/p>\n<\/td>\n

\n

\u60e1\u610f\u7a0b\u5f0f<\/p>\n<\/td>\n<\/tr>\n

\n

TROJ_REVETON.RJ<\/p>\n<\/td>\n

\n

\u60e1\u610f\u7a0b\u5f0f<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

\u6b64\u6b21\u66f4\u65b0\u4e5f\u7279\u5225\u5305\u542b\u4ee5\u4e0b\u9632\u8b77\u529f\u80fd\uff1a<\/p>\n