Баг в антивирусе ESET для Mac позволяет выполнить произвольный код с root-правами.

Здесь может быть ваша реклама

ИБ-специалист компании Google Джейсон Геффнер (Jason Geffner) обнаружил, что проблема в одной из старых библиотек в составе антивируса ESET может представлять серьезную опасность для пользователей Mac’ов.

Исследователь пишет, что уязвимые версии антивирусов используют парсер POCO XML версии 1.4.6p1, датированный 2013 годом, который является форком от Expat XML (версии 2.0.1, датированная 2007 годом). Недавно стало известно, что библиотека Expat содержит уязвимость CVE-2016-0718, которая позволяет злоумышленнику выполнить произвольный код, посредством вредоносного XML-контента. Геффнер обнаружил, что проблема распространяется и на POCO XML, а значит, опасна для продуктов ESET для Mac.

«Уязвимые версии ESET Endpoint Antivirus 6 статически скомпонованы с устаревшей библиотекой парсинга XML и не выполняют надлежащую аутентификацию, позволяя удаленному и неавторизованному атакующему осуществить выполнение произвольного кода с root-правами», — пишет исследователь.

Геффнер поясняет, что esets_daemon использует устаревшую библиотеку POCO XML, уязвимую перед вышеупомянутым багом CVE-2016-0718. Кроме того, библиотека отвечает за активацию и верификацию лицензий, отправляя запрос на https://edf.eset.com/edf. Проблема в том, что данные, которые возвращает сервер, могут использоваться для эксплуатации бага в XML парсере, так как демон не проверяет сертификат сервера лицензий ESET. Получается, что атакующий, уже реализовавший атаку man-in-the-middle, может перехватить и подменить такой запрос. Для исполнения произвольного кода понадобится лишь передать антивирусу специально подготовленный XML-файл.

К своему отчету Геффнер приложил proof-of-concept эксплоит, который провоцирует краш антивирусов ESET для Mac. Хотя сам по себе эксплоит не слишком опасен, на его основе может быть создан более серьезный инструмент.

Разработчики ESET уже выпустили исправление для проблемы, которая в итоге получила идентификатор CVE-2016-9892. Всем пользователям настоятельно рекомендуется как можно быстрее обновиться до исправленной версии ESET Endpoint Antivirus 6.4.168.0.

Источник — xakep.ru

7 awesome super powers ruinedSo, what is NFS? For those looking for a quality sport supplement it is a must to purchase only NFS certified supplements. NSF certification makes it easy for athletes of all ages and abilities to safely consume supplements without concern of jeopardizing their career. Below Kondo Cheap Jerseys temperature (TK) the 2CK model gives rise to impurity quantum criticality accompanied by exotic NFL behaviour as the consequence of two conduction electron spins attempting to compensate the spin 1/2 impurity. However, the strict requirements of zero local magnetic field and channel symmetry make a direct observation of the spin 2CK effect difficult. For the back, you can lie down side wise, or remain in a sitting position. The most comfortable posture is sitting on you bed and thrusting your front body to a soft support. Increasingly, these investments include paying large salaries and bonuses to marquee coaches. The median football coach at one of the NCAA’s 128 top tier teams made about $1.5 million in 2014. For example, the Iowa Hawkeye athletics department refers interested applicants to the University of Iowa Licensing cheap oakleys sunglasses Program. Other institutes of higher learning will refer the interested party off site to a representative agency such as the Collegiate Licensing Company, which manages marketing and licensing of university trademarks for ray ban outlet approximately 200 institutions.. Turning to category sales, total amusement and other sales nfl jerseys cheap grew 22.4% during the second quarter while our food and beverage collectively increased 16.8%. Similar to recent quarters, our total sales mix shifted to the more profitable gaming side of our business. Few ray bans sale times scouts go back into coaching and so because they’re what used to be, only a coach could be a scout. Now, we’re seeing a lot more people from a lot different parts of their life coming together to be a scout, and it’s a very exciting career and it’s one that Sports Management Worldwide, we take a lot of pride in fake oakleys having the only on line scouting course to give people an opportunity to break into the business, and I think scouting is as exciting as being the head coach, and you feel a sense of satisfaction when that team wins on Saturday or Sunday.. The ILOVEYOU virus in 2000 had a similarly devastating effect. In January 2007, a worm called Storm appeared by October, experts believed up to 50 million computers were infected. But there plenty of other ways that you can do that in a peaceful manner that doesn involve being disrespectful to Cheap Jerseys the American flag. Sherman.
In reality, while Cronauer did indeed play some cheap oakleys sweet tunes, he rarely resorted to flat out comedy bits, and in fact stated that pretty much everything Williams did in the film would have gotten his ass court martialed. He was never booted from the military, either. No, he had a far more controversial exit: he went home when his tour was over.. It means football on cheap jerseys Thanksgiving, Christmas, New Years and the whole month of January. It means pre season games in August and some kind of excuses for games in May. In July, I’m lucky if I don’t have to deal with the Super Bowl they taped 1974!. Actress Cloris Leachman’s storied career has been recognized with nine Emmys, a Golden Globe and an Academy Award. She has the distinction of being the only woman to win eight Primetime Emmy Awards and one Daytime Emmy. Cloris has starred in a wide range of theater, television and motion picture projects. He does so, first and foremost, because he understands his faith. His Christian faith guides him to live his life to a certain standard; and that doing otherwise can, will and does lead people astray. He does it because he’s well aware that there is life for these student athletes after football, and, he is in a position to instill good cheap football jerseys morals and ethics into them; things that will serve them far better the rest of their lives than an ‘undefeated season back in oakley outlet the day’ ever will; things that, once learned, can be passed down to their kids.. Each and every year the NFL draft is becoming more and more popular and is becoming a holiday of sorts for NFL and cheap oakleys sunglasses football fans. Aside from food, friends, and beverages, there’s no better way to increase the fun had during the NFL draft than by placing small bets with your friends. Of those people, the next person to win gets all the money in the bowls and all the relevant pots. Aim marketing efforts at potential players and sponsors. Your affiliated governing organization can provide marketing materials such as templates for ray ban outlet signage and postcards. Create alliances with local recreation centers and other youth sports leagues. «Monday Night Football,» with its national TV audience, was especially problematic. The announcers talked about the choppy flow of the game, and the extra time cheap oakley sunglasses it took as officials tried to figure out calls. And officials also just barely controlled what appeared to be a brewing brawl between the Atlanta Falcons and the Denver Broncos. In its pre modified, natural form, K. Planticola is partly responsible for the decomposition of all plant matter a vital step in the natural life cycle and it’s notoriously aggressive in this role. That’s why it was picked out for experimentation in the first place: Like an Old Testament God, K.

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *