¾Ç¼ºÄÚµå ½ÇÇࡤÀ©µµ¿ì º¸¾È±â´É ¿ìȸ À§ÇØ Adobe Flash ¹× Java ÀÌ¿ë
[º¸¾È´º½º ±èÅÂÇü] ¸¶ÀÌÅ©·Î¼ÒÇÁÆ®(ÀÌÇÏ MS)ÀÇ Internet Explorer¿¡¼ ¿ø°ÝÄÚµå ½ÇÇàÀÌ °¡´ÉÇÑ ½Å±Ô Ãë¾àÁ¡ÀÌ ¹ß°ßµÇ¾î ÁÖÀÇ°¡ ¿ä±¸µÈ´Ù.
MSÀÇ Internet Explorer¿¡¼ »ç¿ëµÇ´Â mshtml CDwnBindInfo ¿ÀºêÁ§Æ®¿¡¼ use-after-free Ãë¾àÁ¡ÀÌ ¹ß°ßµÆ´Ù. ÇØ´ç Ãë¾àÁ¡À» ¾Ç¿ëÇÑ °ø°ÝÀº ¾Ç¼ºÄÚµå ½ÇÇà ¹× À©µµ¿ìÀÇ º¸¾È±â´É ¿ìȸ¸¦ À§ÇØ Adobe Flash ¹× Java°¡ ÀÌ¿ëµÈ´Ù.
ÇØ´ç Ãë¾àÁ¡¿¡ ´ëÇÑ º¸¾È ¾÷µ¥ÀÌÆ®´Â ¾ÆÁ÷ ¹ßÇ¥µÇÁö ¾Ê¾ÒÀ¸³ª Ãë¾àÁ¡À» ¾Ç¿ëÇÑ °ø°Ý ½Ãµµ°¡ ÇØ¿Ü¿¡¼ È®ÀÎµÇ¾î »ç¿ëÀÚÀÇ ÁÖÀÇ°¡ ƯÈ÷ ¿ä±¸µÈ´Ù.
À̹ø Ãë¾àÁ¡¿¡ ¿µÇâÀ» ¹Þ´Â ¼ÒÇÁÆ®¿þ¾î´Â Internet Explorer 6, 7, 8 ¹öÀüÀÌ´Ù. ÀÌ¿¡ ÇØ´ç Ãë¾àÁ¡¿¡ ¿µÇâÀ» ¹ÞÁö ¾Ê´Â ¼ÒÇÁÆ®¿þ¾îÀÎ Internet Explorer 9 ¶Ç´Â Internet Explorer 10À» »ç¿ëÇÏ¸é µÈ´Ù.
Windows XP »ç¿ëÀÚ´Â MSÀÇ º¸¾È ¾÷µ¥ÀÌÆ® ¹ßÇ¥ Àü±îÁö ´Ù¸¥ ÀÎÅÍ³Ý ºê¶ó¿ìÀú(Mozilla Firefox, Google Chrome, Opera µî)¸¦ »ç¿ëÇÏ´Â °ÍÀÌ ÁÁ´Ù.
¶Ç MSÀÇ º¸¾È ¾÷µ¥ÀÌÆ® ¹ßÇ¥ Àü±îÁö ¿µÇâÀ» ¹Þ´Â Internet Explorer ¹öÀüÀ» »ç¿ëÇÒ °æ¿ì Ãë¾àÁ¡¿¡ ÀÇÇÑ ÇÇÇظ¦ ÁÙÀ̱â À§Çؼ EMET(Enhanced Mitigation Experience Toolkit)¸¦ »ç¿ëÇØ Internet Explorer¿¡ Àû¿ëÇØ Ãë¾àÁ¡ÀÌ ¾Ç¿ëµÇÁö ¸øÇϵµ·Ï Á¶Ä¡ÇÏ¸é µÈ´Ù.
ÇØ´ç Ãë¾àÁ¡Àº °ø°ÝÀ» À§ÇØ Adobe Flash¿Í Java°¡ °°ÀÌ »ç¿ëµÆÀ¸¸ç, Internet Explorer¿¡¼ Flash¿Í Java¸¦ ºñÈ°¼ºÇϱâ À§ÇØ ´ÙÀ½ ¹æ¹ýÀÌ »ç¿ëµÉ ¼ö ÀÖ´Ù.
-Flash ActiveX ÄÁÆ®·Ñ ½ÇÇà ÁßÁö : CLSID°¡ {D27CDB6E-AE6D-11cf-96B8-444553540000} ActiveX ÄÁÆ®·Ñ ½ÇÇàÀ» ÁßÁö.
-Java ºñÈ°¼ºÈ : Java Á¦¾îÆÇÀÇ º¸¾ÈÅÇ¿¡¼ À¥ ºê¶ó¿ìÁ®ÀÇ Java content°¡ ½ÇÇàµÇÁö ¸øÇϵµ·Ï ó¸® (ÇØ´ç ±â´ÉÀ» »ç¿ëÇϱâ À§Çؼ´Â Java 7 Update 10 ÀÌ»óÀ¸·Î ¾÷µ¥ÀÌÆ®ÇØ¾ß ÇÔ).
*EMET(Enhanced Mitigation Experience Toolkit) : MS¿¡¼ Á¦°øÇÏ´Â ÇÁ·Î±×·¥À¸·Î ¼ÒÇÁÆ®¿þ¾îÀÇ Ãë¾àÁ¡ÀÌ ¾Ç¿ëµÇÁö ¸øÇϵµ·Ï ÇÏ´Â ±â´ÉÀ» ÇÔ.
*Use After Free Ãë¾àÁ¡ : ¼ÒÇÁÆ®¿þ¾î ±¸Çö ½Ã µ¿Àû ȤÀº Á¤ÀûÀ¸·Î ÇÒ´çµÈ ¸Þ¸ð¸®¸¦ ÇØÁ¦ÇßÀ½¿¡µµ ºÒ±¸ÇÏ°í À̸¦ °è¼Ó ÂüÁ¶(»ç¿ë)ÇÏ¿© ¹ß»ýÇÏ´Â Ãë¾àÁ¡.
[Âü°í»çÀÌÆ®]
¡¤http://technet.microsoft.com/security/advisory/2794220
¡¤http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html
¡¤http://support.microsoft.com/kb/2458544
¡¤http://go.microsoft.com/fwlink/?LinkID=200220&clcid=0x409
¡¤http://support.microsoft.com/kb/240797
¡¤http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/client-security.html#disable
[±èÅÂÇü ±âÀÚ(boan@boannews.com)]
<ÀúÀÛ±ÇÀÚ: º¸¾È´º½º(http://www.boannews.com/) ¹«´ÜÀüÀç-Àç¹èÆ÷±ÝÁö>