[-IE-] ie6~ie11有重大安全漏洞(试译版)

楼主: George017 (阿丙)   2014-04-28 22:29:11
: Microsoft Corp is rushing to fix a bug in its widely used
: Internet Explorer web browser after a computer security
: firm disclosed the flaw over the weekend, saying hackers
: have already exploited it in attacks on some U.S. companies.
在一家网络安全公司揭露一个缺陷后的整个周末,Microsoft忙于料理一个Internet
Explorer浏览器上被广泛利用的漏洞,据传已经有hacker使用该漏洞对位于美国的一些企
业进行攻击。
: Microsoft disclosed on Saturday its plans to fix the bug,
: which targets Internet Explorer versions 9 through 11.
Microsoft于周六揭晓关于修复该漏洞的计画,主要将针对Internet Explorer 9到11版。
: Those versions take up 26.25 percent of the browser market,
: according to FireEye, the cybersecurity software company
: that caught the bug.
由FireEye,这个抓到本漏洞的网络安全公司所做的统计;这些将被修正的版本约占了浏览
器市场的26.25%。
: The bug, however, reportedly affects versions 6 through 11.
: Together, those versions dominate desktop browsing, accounting
: for 55 percent of the PC browser market, according to tech
: research firm NetMarketShare.
然而,这个漏洞据报会影响到Internet Explorer 6至11版,根据由科技研究公司
NetMarketShare的资料,所有受影响的版本占了整个PC浏览器55%的市占率。
: Microsoft is rushing to fix a bug in its widely used
: Internet Explorer web browser after a computer security firm
: disclosed the flaw over the weekend
(本段与第一段重复,故省略)
: PCs running Windows XP will not receive any updates fixing that
: bug when they are released, however, because Microsoft stopped
: supporting the 13-year-old operating system earlier this month.
然而,使用Windows XP的PC将不会收到任何修复这项漏洞的更新,因为在本月稍早,
Microsoft已经终止了对这个有13年历史的作业系统的支援。
: Security firms estimate that between 15 and 25 percent of the
: world's PCs still run Windows XP.
网络安全公司估计全球有15%到25%的PC仍在执行Windows XP。
: FireEye Inc said that a sophisticated group of hackers have been
: exploiting the bug in a campaign dubbed 'Operation Clandestine Fox.'
FireEye公司表示有群经验老到的Hacker已经在名为"Operation Clandestine Fox"的攻击
行动中使用了这个漏洞。
: FireEye, whose Mandiant division helps companies respond to cyber
: attacks, declined to name specific victims or identify the group
: of hackers, saying that an investigation into the matter is still
: active. It described the hackers as 'extremely proficient at lateral
: movement' and 'difficult to track.'
FireEye旗下,负责协助企业面对网络攻击的Mandiant部门,不便透漏受害者或是与hacker
组织相关的名字,该部门表示对此漏洞的相关调查仍在进行中。这显示这群hacker"相当熟
练于旁敲侧击"而且"难以追踪"。
: 'It's a campaign of targeted attacks seemingly against U.S.-based
: firms, currently tied to defense and financial sectors,' FireEye
: spokesman Vitor De Souza said via email. 'It's unclear what the
: motives of this attack group are, at this point. It appears to be
: broad-spectrum intel gathering.'
"这似乎是针对美国那些与国防、金融产业息息相关的公司所进行的攻击行动"FireEye的发
言人Vitor De Souza透过e-mail发表评论。"目前还不清楚发动攻击组织的动机是什么。
It appears to be broad-spectrum intel gathering.(这句不会翻)"
: He declined to elaborate, though he said one way to protect against
: them would be to switch to another browser.
尽管他没有明说,透过他所说的话,另一个与之抗衡的方式可能是切换至另一个浏览器。
: The bug reportedly affects versions 6 through 11 of Internet Explorer
这个漏洞获报会影响6到11版的Internet Explorer。
: Microsoft said in the advisory that the vulnerability could allow
: a hacker to take complete control of an affected system, then do things
: such as viewing changing, or deleting data, installing malicious
: programs, or creating accounts that would give hackers full user rights.
Microsoft在公告中表示该弱点能允许Hacker获得系统的完整控制权,然后进行如
viewing changing(这个看不懂)、删除资料、安装恶意程式、或是建立一个拥有完整权限
的使用者帐号等行动。
: FireEye and Microsoft have not provided much information about the
: security flaw or the approach that hackers could use to figure out how
: to exploit it, said Aviv Raff, chief technology officer of cybersecurity
: firm Seculert.
"FireEye和Microsoft并没有提供更多关于这个安全弱点或是Hacker可以用它来做什么的资
讯。"Seculert网络安全公司的首席技术员Aviv Raff这么说。
: Yet other groups of hackers are now racing to learn more about it so
: they can launch similar attacks before Microsoft prepares a security
: update, Raff said.
"其他Hacker们正快马加鞭地从中学习(即Operation Clandestine Fox),好叫他们可以在
Microsoft释出安全更新前发动类似的攻击"Raff继续说。
: 'Microsoft should move fast,' he said. 'This will snowball.'
"Microsoft得动作快了"他说"这会像雪球一样越滚越大"
: Still, he cautioned that Windows XP users will not benefit from that
: update since Microsoft has just halted support for that product.
然后,他提醒,Windows XP的使用者将不会因为这个更新而尝到甜头,因为Microsoft已经
终止了对这项产品的支援。
: The software maker said in a statement to Reuters that it advises
: Windows XP users to upgrade to one of two most recently versions of
: its operating system, Windows 7 or 8.
这家软件制造商(Microsoft)向Reuters(路透社)表示,它建议Windows XP使用者升级到旗
下两款最新的作业系统,Windows 7或8其中之一。
===============================================================================
第一次翻译,如有翻得不妥,欢迎指证!也谢谢原PO的原文!
话说这原文内容的重复率有点高(是因为是重点吗?)

Links booklink

Contact Us: admin [ a t ] ucptt.com