{"id":117842,"date":"2025-08-08T13:40:26","date_gmt":"2025-08-08T05:40:26","guid":{"rendered":"https:\/\/www.ioiotimes.com\/?p=117842"},"modified":"2025-08-08T13:40:26","modified_gmt":"2025-08-08T05:40:26","slug":"%e8%b6%a8%e5%8b%a2%e7%a7%91%e6%8a%80zdi%e6%bc%8f%e6%b4%9e%e6%87%b8%e8%b3%9e%e8%a8%88%e7%95%ab%e9%82%81%e5%85%a520%e9%80%b1%e5%b9%b4%ef%bc%8c%e6%8c%81%e7%ba%8c%e5%bc%95%e9%a0%98%e6%a5%ad%e7%95%8c","status":"publish","type":"post","link":"https:\/\/www.ioiotimes.com\/?p=117842","title":{"rendered":"\u8da8\u52e2\u79d1\u6280ZDI\u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\u9081\u516520\u9031\u5e74\uff0c\u6301\u7e8c\u5f15\u9818\u696d\u754c"},"content":{"rendered":"\n

\u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\u6fc0\u52f5\u8cc7\u5b89\u7814\u7a76\uff0c\u5168\u9762\u63d0\u5347\u5ba2\u6236\u8207\u7522\u696d\u5b89\u5168<\/h3>\n\n\n\n

\u5168\u7403\u7db2\u8def\u8cc7\u5b89\u9818\u5c0e\u5ee0\u5546\u8da8\u52e2\u79d1\u6280<\/a> (\u6771\u4eac\u8b49\u5238\u4ea4\u6613\u6240\u80a1\u7968\u4ee3\u78bc\uff1a4704<\/a>) \u6176\u795d\u5176 ZDI \u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\u9081\u5165\u7b2c 20 \u9031\u5e74\u3002ZDI \u662f\u5168\u7403\u6700\u5927\u3001\u6700\u6210\u529f\u7684\u975e\u9650\u5b9a\u5ee0\u5546\u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\uff0c\u81ea\u00a02005 \u5e74\u8d77\uff0cZDI \u900f\u904e\u6f0f\u6d1e\u61f8\u8cde\u734e\u52f5\u8207\u5168\u7403\u9053\u5fb7\u99ed\u5ba2\u7af6\u8cfd\uff0c\u6301\u7e8c\u63a8\u52d5\u8edf\u9ad4\u6f0f\u6d1e\u7684\u8ca0\u8cac\u4efb\u63ed\u9732\u3002<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

<\/p>\n\n\n\n

\u77ad\u89e3\u6709\u95dc\u8da8\u52e2\u79d1\u6280<\/a> ZDI \u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\u2122\u7684\u66f4\u591a\u8cc7\u8a0a\uff0c\u8acb\u81f3\uff1ahttps:\/\/www.trendmicro.com\/zh_tw\/zero-day-initiative\/about.html<\/a><\/p>\n\n\n\n

\u8da8\u52e2\u79d1\u6280\u71df\u904b\u9577 Kevin Simzer \u8868\u793a\uff1a\u300c\u6211\u5011\u6700\u512a\u5148\u7684\u76ee\u6a19\uff0c\u662f\u5354\u52a9\u5ba2\u6236\u63a1\u53d6\u4e3b\u52d5\u7684\u8cc7\u5b89\u9632\u79a6\u7b56\u7565\u3002ZDI \u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\u662f\u6211\u5011\u5c0d\u6297\u7db2\u8def\u72af\u7f6a\u5206\u5b50\u7684\u6700\u4f73\u5229\u5668\u4e4b\u4e00\uff0c\u4e5f\u662f\u696d\u754c\u7368\u4e00\u7121\u4e8c\u7684\u5b58\u5728\u3002\u76ee\u524d\u696d\u754c\u5c1a\u672a\u6709\u5176\u4ed6\u5ee0\u5546\u80fd\u50cf\u6211\u5011\u4e00\u6a23\uff0c\u9019\u9ebc\u65e9\u5c31\u7232\u5ba2\u6236\u63d0\u4f9b\u9632\u8b77\u3002\u300d<\/p>\n\n\n\n

\u8da8\u52e2\u79d1\u6280 ZDI \u662f\u5168\u7403\u6f0f\u6d1e\u7814\u7a76\u8207\u63ed\u9732\u7684\u9818\u5c0e\u8005\u3002\u6839\u64da Omdia<\/a> \u6307\u51fa\uff0c2024\u00a0\u5e74\uff0cZDI \u5e6b\u52a9\u8ca0\u8cac\u4efb\u5730\u63ed\u9732\u4e86\u5168\u7403\u00a073%\u00a0\u7684\u6f0f\u6d1e\uff0c\u6bd4\u6240\u6709\u5176\u4ed6\u53c3\u8207\u5ee0\u5546\u7684\u7e3d\u548c\u9084\u591a\u3002<\/p>\n\n\n\n

\u9019\u4e9b\u65b0\u767c\u73fe\u6f0f\u6d1e\u80cc\u5f8c\u7684\u7814\u7a76\uff0c\u80fd\u78ba\u4fdd\u8da8\u52e2\u79d1\u6280\u7684\u5ba2\u6236\u5728\u96f6\u6642\u5dee\u653b\u64ca\u767c\u751f\u524d\u5c31\u7372\u5f97\u865b\u64ec\u4fee\u88dc\u7a0b\u5f0f\u3002\u9019\u4e9b\u865b\u64ec\u4fee\u88dc\u901a\u5e38\u6bd4\u5b98\u65b9\u5ee0\u5546\u91cb\u51fa\u7684\u66f4\u65b0\u65e9\u8d85\u904e\u5169\u500b\u6708\u3002\u800c ZDI \u7684\u8ca2\u737b\u66f4\u4e0d\u9650\u65bc\u8da8\u52e2\u79d1\u6280\u5ba2\u6236\uff0c\u5b83\u4e5f\u8b93\u6574\u500b\u6578\u4f4d\u4e16\u754c\u66f4\u5b89\u5168\u2014\u2014\u900f\u904e\u5354\u52a9\u8edf\u9ad4\u5ee0\u5546\u5728\u5a01\u8105\u653b\u64ca\u8005\u5229\u7528\u6f0f\u6d1e\u4e4b\u524d\uff0c\u5c31\u5148\u5c07\u5176\u4fee\u5fa9\u3002<\/p>\n\n\n\n

\u8a72\u8a08\u756b\u8d77\u521d\u6e90\u81ea\u65bc\u4e00\u500b\u6a38\u5be6\u7684\u69cb\u60f3\uff0c\u65bc 2005 \u5e74\u7531 3Com \u65d7\u4e0b\u7684 TippingPoint \u6240\u5275\u7acb\u3002\u5176\u7406\u5ff5\u5f88\u7c21\u55ae\uff1a\u900f\u904e\u91d1\u9322\u734e\u52f5\uff0c\u9f13\u52f5\u8cc7\u5b89\u7814\u7a76\u793e\u7fa4\u767c\u6398\u5e38\u898b\u7522\u54c1\u4e2d\u7684\u96f6\u6642\u5dee\u6f0f\u6d1e\uff0c\u4e26\u8ca0\u8cac\u4efb\u5730\u901a\u5831\u7d66\u76f8\u95dc\u5ee0\u5546\uff0c\u5354\u52a9\u5176\u5f37\u5316\u7522\u54c1\u5b89\u5168\u6027\u3002<\/p>\n\n\n\n

\u5982\u4eca\u5ee3\u70ba\u4eba\u77e5\u7684 Pwn2Own \u5927\u8cfd\u65bc 2007 \u5e74\u9996\u6b21\u8209\u8fa6\uff0c\u63d0\u4f9b\u7814\u7a76\u4eba\u54e1\u4e00\u500b\u4e92\u76f8\u8f03\u52c1\u3001\u8207\u6642\u9593\u8cfd\u8dd1\u7684\u6a5f\u6703\uff0c\u5728\u9810\u5148\u6307\u5b9a\u7684\u7522\u54c1\u985e\u5225\u4e2d\u5c0b\u627e\u96f6\u6642\u5dee\u6f0f\u6d1e (zero-day)\u3002<\/p>\n\n\n\n

\u8da8\u52e2\u79d1\u6280\u5728 2016 \u5e74\u4f75\u8cfc TippingPoint \u4e4b\u5f8c\uff0c\u6210\u70ba ZDI \u7684\u7ba1\u7406\u8005\u3002\u4eca\u65e5\uff0c\u8a72\u8a08\u756b\u64c1\u6709\u8d85\u904e 450 \u540d\u5c08\u8077\u7814\u7a76\u4eba\u54e1\uff0c\u5206\u5e03\u65bc\u5168\u7403 14 \u500b\u5a01\u8105\u60c5\u5831\u4e2d\u5fc3\uff0c\u4e26\u532f\u805a\u4e86\u8d85\u904e 19,000 \u540d\u6f0f\u6d1e\u7814\u7a76\u4eba\u54e1\u6240\u7d44\u6210\u7684\u5ee3\u5927\u793e\u7fa4\u3002<\/p>\n\n\n\n

ZDI \u6f0f\u6d1e\u61f8\u8cde\u8a08\u5283\u7684\u91cd\u9ede\u6210\u679c\u5305\u62ec\uff1a<\/p>\n\n\n\n

\u2022\u00a0\u00a0\u00a0\u00a0ZDI \u7814\u7a76\u4eba\u54e1\u767c\u73fe\uff0c\u91dd\u5c0d\u8457\u540d\u7684 Stuxnet \u8815\u87f2\u6240\u5229\u7528\u7684 LNK \u6f0f\u6d1e\u4fee\u88dc\u66f4\u65b0\uff0c\u5be6\u969b\u4e0a\u672a\u80fd\u6709\u6548\u767c\u63ee\u4f5c\u696d\u3002\u900f\u904e\u4ed6\u5011\u7684\u7814\u7a76\uff0c\u5fae\u8edf\u5728\u539f\u59cb\u4fee\u88dc\u7a0b\u5f0f\u767c\u5e03\u4e94\u5e74\u5f8c\uff0c\u624d\u5f97\u4ee5\u63a8\u51fa\u65b0\u7684\u4fee\u88dc\u7248\u672c\u3002
\u2022\u00a0\u00a0\u00a0\u00a0ZDI \u7814\u7a76\u4eba\u54e1\u7372\u9812\u4f86\u81ea\u5fae\u8edf\u7684 12.5 \u842c\u7f8e\u5143\u734e\u91d1\uff0c\u4e3b\u8981\u56e0\u7232\u767c\u73fe\u4e00\u9805\u80fd\u7e5e\u904e\u5fae\u8edf\u5728 Internet Explorer(IE) \u4e2d\u5be6\u4f5c\u7684\u9632\u79a6\u6a5f\u5236\u7684\u6280\u8853\u3002\u8a72\u734e\u91d1\u5168\u6578\u6350\u4f5c\u6148\u5584\u7528\u9014\uff0c\u800c\u9019\u9805\u6280\u8853\u65b0\u7a4e\u7368\u7279\uff0c\u751a\u81f3\u7372\u5f97\u5c08\u5229\u8a8d\u53ef\u3002
\u2022\u00a0\u00a0\u00a0\u00a0\u4e00\u540d ZDI \u7814\u7a76\u4eba\u54e1\u5728 Apple \u7684 Windows \u7248 QuickTime \u8edf\u9ad4\u4e2d\u767c\u73fe\u4e86\u5169\u9805\u96f6\u6642\u5dee\u6f0f\u6d1e\uff0c\u4f7f Apple \u6700\u7d42\u505c\u6b62\u652f\u63f4\u8a72\u7522\u54c1\u3002ZDI \u7a4d\u6975\u547c\u7c72\u4f7f\u7528\u8005\u76e1\u5feb\u89e3\u9664\u5b89\u88dd\u00a0QuickTime\u3002
\u2022\u00a0\u00a0\u00a0\u00a0ZDI \u7684\u7814\u7a76\u6210\u679c\u591a\u6b21\u5354\u52a9\u4e2d\u65b7\u653f\u5e9c\u7684\u96b1\u5bc6\u884c\u52d5\uff0c\u5176\u4e2d\u5305\u62ec\u591a\u6b21\u91dd\u5c0d\u70cf\u514b\u862d\u767c\u52d5\u653b\u64ca\u7684 Black Energy APT\u3002
\u2022\u00a0\u00a0\u00a0\u00a0\u4e00\u540d ZDI \u7814\u7a76\u4eba\u54e1\u65bc 2023 \u5e74\u69ae\u7372 Pwnie \u9812\u767c\u7684\u300c\u6700\u88ab\u4f4e\u4f30\u7684\u7814\u7a76\u300d\u734e\uff0c\u8868\u5f70\u5176\u767c\u73fe\u5168\u65b0\u7684\u4e00\u7a2e\u653b\u64ca\u985e\u578b\uff1a\u555f\u52d5\u5167\u5bb9\u5feb\u53d6\u6295\u6bd2 (activation context cache poisoning)\u3002<\/p>\n\n\n\n

<\/p>\n\n\n\n

\u3000\u3000\u3000\u3000<\/p>\n\n\n\n


\ud83d\udfe6\u5beb\u4e0b\u60a8\u7684\u96fb\u8166\u590f\u65e5\u6545\u4e8b \u5f97\u52c1\u6dbc\u597d\u79ae<\/a>
\ud83d\udfe6\u73fe\u5728\u5c31\u52a0\u5165 ioioTIMES \u81c9\u66f8\u7c89\u7d72\u5718 \u66f4\u591a\u4e92\u52d5\u3001\u66f4\u591a\u597d\u5eb7\u650f\u62b5\u52a0!!
\ud83d\udfe6\u6211\u5011\u6709LINE TODAY<\/a>\u983b\u9053\u4e86\uff0c\u5feb\u4f86\u8ffd\u8e2a\u6211\u5011\u5427!!–\u6700\u65b0\u79d1\u6280\u65b0\u805e \u76e1\u5728\u4f60<\/strong>\u624b
<\/h4>\n","protected":false},"excerpt":{"rendered":"

\u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\u6fc0\u52f5\u8cc7\u5b89\u7814\u7a76\uff0c\u5168\u9762\u63d0\u5347\u5ba2<\/p>\n","protected":false},"author":3,"featured_media":117845,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[13],"tags":[14324,14533,484,143],"class_list":["post-117842","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-trendmicro","tag-zdi","tag-484","tag-143"],"_links":{"self":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts\/117842"}],"collection":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=117842"}],"version-history":[{"count":2,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts\/117842\/revisions"}],"predecessor-version":[{"id":117846,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts\/117842\/revisions\/117846"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/media\/117845"}],"wp:attachment":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=117842"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=117842"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=117842"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}