·¢²¼Ê±¼ä£º2021-04-14
½üÈÕ£¬¹«º£²Ê´¬¡¤6600ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶӼà²âµ½Chromeä¯ÀÀÆ÷Ô¶³Ì´úÂëÖ´ÐЩ¶´¡£
Google ChromeÊÇÓÉGoogle¿ª·¢µÄÃâ·ÑÍøÒ³ä¯ÀÀÆ÷£¬´óÁ¿²ÉÓÃChromeÄں˵Ää¯ÀÀÆ÷ͬÑùÒ²»áÊÜ´Ë©¶´Ó°Ïì¡£¹¥»÷ÕßÀûÓôË©¶´£¬¿ÉÒÔ¹¹ÔìÒ»¸ö¶ñÒâµÄWebÒ³Ãæ£¬µ±Óû§·ÃÎʸÃÒ³ÃæÊ±£¬»áÔì³ÉÔ¶³Ì´úÂëÖ´ÐС£¸Ã0day©¶´Òѱ»ÑéÖ¤£¬Ä¿Ç°GoogleÖ»Õë¶Ô¸Ã©¶´·¢²¼ÁËbeta²âÊÔ°æChrome£¨90.0.4430.70£©ÐÞ¸´£¬ChromeÕýʽ°æ£¨ 89.0.4389.114£©ÈÔÊÜ©¶´Ó°Ïì¡£
¸ßΣ
µ±Ç°Â©¶´POCÒѹ«¿ª

1.µ±Ç°Google¹Ù·½Ö»Õë¶Ô¸Ã©¶´·¢²¼ÁËbeta²âÊÔ°æChrome£¨90.0.4430.70£©ÐÞ¸´£¬ChromeÕýʽ°æ£¨89.0.4389.114£©ÈÔ´æÔÚ©¶´£¬Çë¹Ø×¢¹Ù·½ChromeÕýʽ°æ¸üУ¬¼°Ê±ÐÞ²¹Â©¶´¡£
2.½¨Òé¹ã´óÓû§½«ä¯ÀÀÆ÷ÔËÐÐÔÚsandboxģʽÏ£¨Ä¬ÈÏģʽ£©¡£
RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳÊǹ«º£²Ê´¬¡¤6600ÍøÂçÍÆ³öµÄ½«Éî¶ÈÄÚÈݼì²â¡¢°²È«·À»¤¡¢ÉÏÍøÐÐΪ¹ÜÀíµÈ¼¼Êõ½áºÏµÄÈëÇÖ¼ì²â·ÀÓùϵͳÉ豸£¬Í¨¹ý¶ÔÍøÂçÖÐÉî²ã¹¥»÷ÐÐΪ½øÐÐ׼ȷµÄ·ÖÎöÅжϣ¬Ö÷¶¯ÓÐЧµÄ±£»¤ÍøÂ簲ȫ¡£RG—IDPϵͳÈëÇÖ¼ì²â·ÀÓùϵͳÒÑÖ§³Ö¶Ô¸Ã©¶´µÄ¼ì²â¡£
¹«º£²Ê´¬¡¤6600RG-Scanͨ¹ý¶Ôϵͳ©¶´¡¢·þÎñºóÃÅ¡¢ÍøÒ³¹ÒÂí¡¢SQL×¢Èë©¶´ÒÔ¼°¿çÕ¾½Å±¾µÈ¹¥»÷ÊֶζàÄêµÄÑо¿»ýÀÛ£¬×ܽá³öÁËÖÇÄÜÖ÷»ú·þÎñ·¢ÏÖ¡¢ÖÇÄÜ»¯ÅÀ³æºÍSQL×¢Èë״̬¼ì²âµÈ¼¼Êõ£¬¿ÉÒÔͨ¹ýÖÇÄܱéÀú¹æÔò¿âºÍ¶àÖÖɨÃèÑ¡Ïî×éºÏµÄÊֶΣ¬ÉîÈë׼ȷµÄ¼ì²â³öϵͳºÍÍøÕ¾ÖдæÔڵĩ¶´ºÍÈõµã¡£
RG-WALLϵÁÐÈ«ÐÂÏÂÒ»´ú·À»ðǽÔÚ°²È«ÄÜÁ¦ÉÏ£¬²»½öÖ§³ÖNAT¡¢ACL¡¢DDoS·ÀÓùµÈ´«Í³°²È«¹¦ÄÜ£¬Í¬Ê±Ö§³Ö·á¸»µÄÓ¦Óü¶°²È«¹¦ÄÜ£¬°üÀ¨²¡¶¾²éɱ¡¢ÈëÇÖ¼ì²â¡¢APP¼ì²â¡¢Îļþ¹ýÂË¡¢¶ñÒâURL¹ýÂ˵ȡ£Ìṩ¶àά¶ÈµÄÓ¦Óòã¼à¿ØÓë·ÖÎö£¬°ïÖúÓû§ÕÆÎÕ·çÏÕ£¬¾«×¼Ô¤¾¯¡£¸ÃϵÁзÀ»ðǽҲ֧³ÖÓëÔÆ°²È«ÖÐÐĵÄÁª¶¯£¬ÌṩÁËÁ¢ÌåÓÐЧµÄδ֪Íþв·À»¤¹«º£²Ê´¬¡¤6600¹ÙÍø¡£
Õë¶ÔChromeä¯ÀÀÆ÷Ô¶³Ì´úÂëÖ´ÐУ¬Ç뼰ʱ¹Ø×¢Ïà¹Ø²úÆ·Éý¼¶°ü¸üÐÂÇé¿ö£¬¼°Ê±Éý¼¶¼ì²âÓë·À»¤Éý¼¶°ü¡£
https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html
¹«º£²Ê´¬¡¤6600ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶӣ¬¸ú×Ù×îл¥ÁªÍøÍþвʼþ£¬Õë¶Ô×îа²È«Â©¶´£¬APT¹¥»÷ÒÔ¼°½©Ê¬ÍøÂç¼Ò×å×öʵʱ¸ú×ٺͷÖÎö£»Îª²úÆ·¡¢¿Í»§Ìṩʵʱ¡¢ÓÐЧµÄ°²È«·À»¤²ßÂÔÓë½â¾ö¹«º£²Ê´¬¡¤6600¹ÙÍø¡£

¹«º£²Ê´¬¡¤6600“ÍøÂç+°²È«”Ö÷ÕŽ«ÍøÂçÉ豸µÄ°²È«ÄÜÁ¦³ä·Ö·¢»Ó£¬ÍøÂçÉ豸¡¢°²È«É豸Ó밲ȫƽ̨ÖÇÄÜÁª¶¯£¬¸æ±ð°²È«¹Âµº£¬¹¹³ÉÕûÍøÁª¶¯µÄ°²È«±£ÕÏÌåϵ£¬ÊµÏÖ·À»¤¡¢°²È«Ô¤²â¡¢·ÖÎöºÍÏìÓ¦µÈ°²È«ÎÊÌâ×Ô¶¯»¯È«Á÷³Ì±Õ»·¡£

ÈçÄúÐèÒª¹«º£²Ê´¬¡¤6600°²È«£¬ÇëÁôÏÂÄúµÄÁªÏµ·½Ê½
