CVE-2016-9632, CVE-2016-9633
[º¸¾È´º½º ¹®°¡¿ë ±âÀÚ] ÇöÁö ½Ã°¢À¸·Î 12¿ù 11ÀÏ, ¿ì¸®³ª¶ó ½Ã°£À¸·Î´Â ´ë·« 11ÀÏ¿¡¼ 12ÀÏ·Î ³Ñ¾î¿À´Â ¹ã »çÀÌ¿¡ ¹Ì±¹ÀÇ National Vulnerability DatabaseÀ» ÅëÇØ ¹ßÇ¥µÈ Ãë¾àÁ¡µéÀÌ´Ù.
1. CVE-2016-9629
Tatsuya Kinoshita w3m fork 0.5.3-33. w3m ÀÌÀü ¹öÀüÀÇ Ãë¾àÁ¡À¸·Î ¿ø°ÝÀÇ °ø°ÝÀÚ°¡ Á¶ÀÛµÈ HTML ÆäÀÌÁö¸¦ ÅëÇÏ¿© DoS °ø°Ý(segmentation fault)À» ÇÒ ¼ö ÀÖ°Ô ÇØÁØ´Ù.
2. CVE-2016-9630
Tatsuya Kinoshita w3m fork 0.5.3-33. w3m ÀÌÀü ¹öÀüÀÇ Ãë¾àÁ¡À¸·Î ¿ø°ÝÀÇ °ø°ÝÀÚ°¡ Á¶ÀÛµÈ HTML ÆäÀÌÁö¸¦ ÅëÇÏ¿© DoS °ø°Ý(global buffer overflow)À» ÇÒ ¼ö ÀÖ°Ô ÇØÁØ´Ù.
3. CVE-2016-9631
Tatsuya Kinoshita w3m fork 0.5.3-33. w3m ÀÌÀü ¹öÀüÀÇ Ãë¾àÁ¡À¸·Î ¿ø°ÝÀÇ °ø°ÝÀÚ°¡ Á¶ÀÛµÈ HTML ÆäÀÌÁö¸¦ ÅëÇÏ¿© DoS °ø°Ý(segmentation fault)À» ÇÒ ¼ö ÀÖ°Ô ÇØÁØ´Ù.
4. CVE-2016-9632
Tatsuya Kinoshita w3m fork 0.5.3-33. w3m ÀÌÀü ¹öÀüÀÇ Ãë¾àÁ¡À¸·Î ¿ø°ÝÀÇ °ø°ÝÀÚ°¡ Á¶ÀÛµÈ HTML ÆäÀÌÁö¸¦ ÅëÇÏ¿© DoS °ø°Ý(global buffer overflow)À» ÇÒ ¼ö ÀÖ°Ô ÇØÁØ´Ù.
5. CVE-2016-9633
Tatsuya Kinoshita w3m fork 0.5.3-33. w3m ÀÌÀü ¹öÀüÀÇ Ãë¾àÁ¡À¸·Î ¿ø°ÝÀÇ °ø°ÝÀÚ°¡ Á¶ÀÛµÈ HTML ÆäÀÌÁö¸¦ ÅëÇÏ¿© DoS °ø°Ý(infinite loop and resource consumption)À» ÇÒ ¼ö ÀÖ°Ô ÇØÁØ´Ù.
[±¹Á¦ºÎ ¹®°¡¿ë ±âÀÚ(globoan@boannews.com)]
<ÀúÀÛ±ÇÀÚ: º¸¾È´º½º(www.boannews.com) ¹«´ÜÀüÀç-Àç¹èÆ÷±ÝÁö>