June 02, 2020

Language:

CamSA14-02: ក្រុមហ៊ុនម៉ៃក្រូសូហ្វ ចេញផ្សាយ អំពីចំនុចខ្សោយនៅក្នុង Internet Explorer

 ១. ព័ត៌មានទូទៅ

ក្រុមហ៊ុនម៉ៃក្រូសូហ្វបានចេញផ្សាយនូវការណែនាំអំពីសន្តិសុខ Microsoft Security Advisory (3016711) ដែលមាននៅក្នុង VBScript Scripting Engine។

ចំនុចខ្សោយទាំងអស់នេះ អាចអនុញ្ញាតឲ្យមានការភ្ជាប់ពីចង្ងាយ អ្នកវាយប្រហារ (attacker) អាចប្រតិបត្តិការកូដផ្សេងៗ ឬក៏បង្កើតបានជា denial of service ឬក៏ទទួលបាននូវសិទ្ធិ ភ្ជាប់ទៅកាន់ files ឬប្រព័ន្ធរបស់អ្នក។

២. ប្រព័ន្ធដែលទទួលរងគ្រោះ

– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2
– Windows Server 2008 for x64-based Systems Service Pack 2
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
– VBScript 5.6 (Internet Explorer 6)
– VBScript 5.7 (Internet Explorer 6 and Internet Explorer 7)
– VBScript 5.8 (Internet Explorer 8)
– VBScript 5.8 (Internet Explorer 9)
– VBScript 5.8 (Internet Explorer 10)
– VBScript 5.8 (Internet Explorer 11)

៣. ដំណោះស្រាយ (Solutions)

សូមចូលទៅកាន់អស័យដ្ឋានខាងក្រោម រួចធ្វើតាមការណែនាំ៖

– https://support.microsoft.com/en-us/kb/3016711/

៤. ឯកសារយោង (Reference)

– https://technet.microsoft.com/en-us/library/security/ms14-084.aspx

– https://support.microsoft.com/en-us/kb/3016711/

៥. ព័ត៌មានទំនាក់ទំនង (Contact Information)

– សារអេឡិចត្រូនិច (Email): office@camcert.gov.kh

– ទូរស័ព្ទ: (855) 92 335 536 – (855) 16 888 209

[message_box title=”ការទទួលខុសត្រូវ៖” color=”yellow”]

រាល់ព័តមានដែលផ្តល់នៅទីនេះ គឺគ្រាន់តែជាការផ្តល់ដំណឹងប៉ុណ្ណោះ ដោយគ្មានការធានាអ្វីមួយឡើយ។

[/message_box]

***Disclaimer: CamCERT own some of the content. Our purpose is pure to help spread the awareness, tips or other information related to security to everyone. Even though every information is true, accurate, completed and appropriate, we make no responsibility nor warranty since everything could go wrong.

Leave a Reply

Your email address will not be published. Required fields are marked *