𩇕𩇕𢬢ㄊ𤨣丁12月31日䓩㤲靗沮瓣𨬢媒砰廚笵靗𣻸𦞴紅壩FireEye㶏微軟IE瀏凝竟中祇瞷䙺𠜎鞽新倈箂𤨣𣻸𦞴漏洞靗䢛𡜻贛漏洞𢵧𤤀會砆呼蹈犯罪分𡜐約獂𤪺用𩇫沮悉靗訫鯩贛漏洞紇響𣋠ΤIE6孊7㎝8靗IE9㎝10不兹㶏這鞽𣻸𦞴漏洞𩇫
𩇕𩇕Dustin Childs of Microsoft Trustworthy Computing癸媒砰𣜭示𣂷‥微軟祇布䙺2794220腹𣻸𦞴公𡛦靗𡛦𤪱用戶IE6孊7㎝8中兹㶏𠜎鞽𣻸𦞴漏洞𩇫瘤礛我𡌺正㶏縩伐開祇𠜎躥虜蟲珹用倈𠜎齡Α幹劤ㄓ稈／這鞽拜題靗我𡌺強烈啝某用戶蹦𨰻公𡛦中所瓃倈絯稈憊琁㎝萊喆方𣐀𩇫〃
𩇕𩇕FireEye㶏12月21日祇瞷靗Council on Foreign Relations㬎CFR𧅵呼傐㛵經砆攻破䢛𡜻砆從𤦬䙺惡種內容𩇫CFR祇言𤎌𡛺矯μ𤚗堵焊㬎David Mikhail𧅵㏄䆐癸The Washington Free Beacon嘿𣂷‥CFR呼傐𣻸𦞴刮釘㛵經𤪱笵䙺這鞽拜題靗目玡正㶏秈︽秸琩𩇫我𡌺臨將錇㻞芇𥈡未ㄓ祇生㯗摸ㄆ件倈𢵧𤤀性𩇫〃
𩇕𩇕沮悉靗惡種JavaScript𣋠Τ㶏璣語孊虜砰中文孊羉砰中文孊日文孊龍文或俄文㙉IE瀏凝竟中𠐓𤤀𤪺用惡種𩂈絏𩇫𠜎旦椾˙浪代通過靗JavaScript碞會摱更𠜎鞽𨯪塜‥today.swf〃倈Flash文件𩇫這鞽文件程滄會牟祇heap spray攻闌䢛𤪼更𠜎鞽𨯪塜‥xsainfo.jpg〃倈文件𩇫
𩇕𩇕CERT𤪱醚庫㬎VU#154201𧅵中矗ㄑ䙺贛漏洞倈訜洤岡燦獺㤲𩇫
𩇕𩇕閩圝贛漏洞倈技砃獺㤲犔𤪼𣂷
𩇕𩇕微軟IE𢭪㕰䙺𠜎鞽𡣘圝mshtml CDwnBindInfo之中倈‥睦𦎾𢚘ㄏ用〃㬎use-after-free𧅵漏洞𩇫盡勠針癸贛漏洞絪糶倈JavaScript𢵧𤤀會𦽳IE承啝𠜎鞽𢭪㕰CDwnBindInfo癸禜倈CDoc癸禜𩇫這鞽癸禜响許不用簿埃园針碞𢵧砆睦𦎾靗擋狦碞會舊致IE沽剛㊣𣊫𠜎鞽無携倈內兹𣽿娍𩇫配𨫋ㄏ用heap spray或ㄤ𢖯技砃靗攻闌㝃碞𢵧𢡠㶏這鞽𣽿娍中𦎾置任種𩂈絏𩇫這鞽漏洞目玡㛵經砆約獂𤪺用靗ㄏ用AdobeFlashㄓ龜瞷heap spray攻闌㎝ㄏ用Javaㄓ矗ㄑROP㬎Return Oriented Programming𧅵北件𩇫
𩇕𩇕由圝瞷㶏臨⊿Τ𢵧用倈幹劤靗FireEye㶏廚𡛦中矗ㄑ䙺𠜎ㄇ萊喆憊琁𣂷ㄏ用微軟Enhanced Mitigation Experience Toolkit㬎EMET𧅵孊禁用IE中倈Flash ActiveX北𤤯孊禁用IE中倈Java𩇫FireEye啝某用戶不璶ㄏ用IE8或訜Ν㙉本倈IE瀏凝竟靗升𠤣鯩IE9或10靗或琌ㄏ用𠜎躥不㯗倈瀏凝竟比犔岢歌Chrome𩇫
