Kokeilkaapa, jos uskallatte.
Test Your Browser's Security Now
Careful! The test will try to crash your browser! Close all other browser windows before starting and bookmark this page. If your browser crashes during the test, restart it and return to this page. It will show which vulnerability crashed your browser and offer you to continue the test or view the results.
The test requires persistent cookies to be enabled. The cookie is used to restore your session after browser crash.
Your browser reports to be: "Mozilla/5.0 (X11; U; Linux x86_64; fi-FI; rv:1.9.0.14) Gecko/2009090216 Ubuntu/8.04 (hardy) Firefox/3.0.14"
Browser name: Firefox
Version: 3.0.14
Platform: Linux
Only test for bugs specific to my type of browser
Run all available tests
Choose individual tests
Test results
* Passed Mozilla crashes with evidence of memory corruption - passed
* Passed Internet Explorer bait & switch race condition - passed
* Passed Mozilla crashes with evidence of memory corruption - passed
* Passed Internet Explorer createTextRange arbitrary code execution - passed
* Passed Windows MDAC ADODB ActiveX control invalid length - passed
* Passed Adobe Flash Player video file parsing integer overflow - passed
* Passed XMLDOM substringData() heap overflow - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.5) - passed
* Passed Opera JavaScript invalid pointer arbitrary code execution - passed
* Passed Apple QuickTime MOV file JVTCompEncodeFrame heap overflow - passed
* Passed Mozilla code execution via QuickTime Media-link files - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.8) - passed
* Passed Mozilla memory corruption vulnerabilities (rv:1.8.1.10) - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.12) - passed
* Passed Apple QuickTime 'QTPlugin.ocx' ActiveX Control Multiple Buffer Overflows - passed
* Passed Window location property cross-domain scripting - passed
* Passed Mozilla Firefox MathML integer overflow - passed
* Passed Internet Explorer XML nested SPAN elements memory corruption - passed
Congratulations! The test has found no vulnerabilities in your browser!
Tässä linkki:
http://bcheck.scanit.be/bcheck/
Mitenkäs testi sujui explorer-väellä?
Test Your Browser's Security Now
Careful! The test will try to crash your browser! Close all other browser windows before starting and bookmark this page. If your browser crashes during the test, restart it and return to this page. It will show which vulnerability crashed your browser and offer you to continue the test or view the results.
The test requires persistent cookies to be enabled. The cookie is used to restore your session after browser crash.
Your browser reports to be: "Mozilla/5.0 (X11; U; Linux x86_64; fi-FI; rv:1.9.0.14) Gecko/2009090216 Ubuntu/8.04 (hardy) Firefox/3.0.14"
Browser name: Firefox
Version: 3.0.14
Platform: Linux
Only test for bugs specific to my type of browser
Run all available tests
Choose individual tests
Test results
* Passed Mozilla crashes with evidence of memory corruption - passed
* Passed Internet Explorer bait & switch race condition - passed
* Passed Mozilla crashes with evidence of memory corruption - passed
* Passed Internet Explorer createTextRange arbitrary code execution - passed
* Passed Windows MDAC ADODB ActiveX control invalid length - passed
* Passed Adobe Flash Player video file parsing integer overflow - passed
* Passed XMLDOM substringData() heap overflow - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.5) - passed
* Passed Opera JavaScript invalid pointer arbitrary code execution - passed
* Passed Apple QuickTime MOV file JVTCompEncodeFrame heap overflow - passed
* Passed Mozilla code execution via QuickTime Media-link files - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.8) - passed
* Passed Mozilla memory corruption vulnerabilities (rv:1.8.1.10) - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.12) - passed
* Passed Apple QuickTime 'QTPlugin.ocx' ActiveX Control Multiple Buffer Overflows - passed
* Passed Window location property cross-domain scripting - passed
* Passed Mozilla Firefox MathML integer overflow - passed
* Passed Internet Explorer XML nested SPAN elements memory corruption - passed
Congratulations! The test has found no vulnerabilities in your browser!
Tässä linkki:
http://bcheck.scanit.be/bcheck/
Mitenkäs testi sujui explorer-väellä?
Vastaukset 13
Vanhimmat
Your browser reports to be: "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
Browser name: MSIE
Version: unknown
Platform: Windows Vista
Test results
• Mozilla crashes with evidence of memory corruption - passed
• Internet Explorer bait & switch race condition - passed
• Mozilla crashes with evidence of memory corruption - passed
• Internet Explorer createTextRange arbitrary code execution - passed
• Windows MDAC ADODB ActiveX control invalid length - passed
• Adobe Flash Player video file parsing integer overflow - passed
• XMLDOM substringData() heap overflow - passed
• Mozilla crashes with evidence of memory corruption (rv:1.8.1.5) - passed
• Opera JavaScript invalid pointer arbitrary code execution - passed
• Apple QuickTime MOV file JVTCompEncodeFrame heap overflow - passed
• Mozilla code execution via QuickTime Media-link files - passed
• Mozilla crashes with evidence of memory corruption (rv:1.8.1.8) - passed
• Mozilla memory corruption vulnerabilities (rv:1.8.1.10) - passed
• Mozilla crashes with evidence of memory corruption (rv:1.8.1.12) - passed
• Apple QuickTime 'QTPlugin.ocx' ActiveX Control Multiple Buffer Overflows - passed
• Window location property cross-domain scripting - passed
• Mozilla Firefox MathML integer overflow - passed
• Internet Explorer XML nested SPAN elements memory corruption - passed
Congratulations! The test has found no vulnerabilities in your browser!
2 huomioitavaa asiaa:
- Testi näytti n. sekunnin ajan selaimen ilmoituksen "sivu haluaa ajaa jonkin active x:n"
- Avast oli päällä joka varoitti jostain troijalaisesta ja halusi keskeyttää yhteyden. En tietenkään keskeyttänyt vaan ajoin testin loppuun, olihan testin alussakin kerrottu väärästä havainnosta.
Vista SP2 IE8
Your browser reports to be: "Opera/9.80 (X11; Linux i686; U; fi) Presto/2.2.15 Version/10.00"
Ubuntu 9.04
Test results
Windows animated cursor overflow - passed
Mozilla crashes with evidence of memory corruption - passed
Internet Explorer bait & switch race condition - passed
Mozilla crashes with evidence of memory corruption - passed
Internet Explorer createTextRange arbitrary code execution - passed
Windows MDAC ADODB ActiveX control invalid length - passed
Adobe Flash Player video file parsing integer overflow - passed
XMLDOM substringData() heap overflow - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.5) - passed
Opera JavaScript invalid pointer arbitrary code execution - passed
Apple QuickTime MOV file JVTCompEncodeFrame heap overflow - passed
Mozilla code execution via QuickTime Media-link files - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.8) - passed
Mozilla memory corruption vulnerabilities (rv:1.8.1.10) - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.12) - passed
Apple QuickTime 'QTPlugin.ocx' ActiveX Control Multiple Buffer Overflows - passed
Window location property cross-domain scripting - passed
Mozilla Firefox MathML integer overflow - passed
Internet Explorer XML nested SPAN elements memory corruption - passed
Congratulations! The test has found no vulnerabilities in your browser!
Noin ne rohkeat iehet tekee. Ei tainnut olla edes virusta leikissä taas?
"2 huomioitavaa asiaa:
- Testi näytti n. sekunnin ajan selaimen ilmoituksen "sivu haluaa ajaa jonkin active x:n""
Heh heh...
""2 huomioitavaa asiaa:
- Testi näytti n. sekunnin ajan selaimen ilmoituksen "sivu haluaa ajaa jonkin active x:n""
Heh heh... "
???
Test results
Mozilla crashes with evidence of memory corruption - passed
Internet Explorer bait & switch race condition - passed
Mozilla crashes with evidence of memory corruption - passed
Internet Explorer createTextRange arbitrary code execution - passed
Windows MDAC ADODB ActiveX control invalid length - passed
Adobe Flash Player video file parsing integer overflow - passed
XMLDOM substringData() heap overflow - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.5) - passed
Opera JavaScript invalid pointer arbitrary code execution - passed
Apple QuickTime MOV file JVTCompEncodeFrame heap overflow - passed
Mozilla code execution via QuickTime Media-link files - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.8) - passed
Mozilla memory corruption vulnerabilities (rv:1.8.1.10) - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.12) - passed
Apple QuickTime 'QTPlugin.ocx' ActiveX Control Multiple Buffer Overflows - passed
Window location property cross-domain scripting - passed
Mozilla Firefox MathML integer overflow - passed
Internet Explorer XML nested SPAN elements memory corruption - passed
Congratulations! The test has found no vulnerabilities in your browser!
http://www.aijaa.com/v.php?i=4890290.png
http://www.aijaa.com/v.php?i=4890291.png
Selain on opera10 ja käyttis on ubuntu 9.04
Siis ihanko oikeasti surffaat selaimella, jolla sivut näyttää noin paskalta? :D
Lenny Opera 10 ja puhtain paperein läpi.
>> Mitenkäs testi sujui explorer-väellä?
Kokeilin kolmella eri selaimella. Tässä tulokset:
Browser name: MSIE
Version: 6.0
Platform: Windows XP
Only test for bugs specific to my type of browser
Run all available tests
Choose individual tests
Explorer kaatui heti testin alkuvaiheessa. Varmaan syykin olisi selvinnyt jos olisin jatkanut testiä koko illan
http://www.aijaa.com/v.php?i=4895373.jpg
_______________________________________________________________________________
Your browser reports to be: "Mozilla/5.0 (Windows; U; Windows NT 5.1; fi; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2"
Browser name: Firefox
Version: 3.5.2
Platform: Windows XP
Test results
* Passed Mozilla crashes with evidence of memory corruption - passed
* Passed Internet Explorer bait & switch race condition - passed
* Passed Mozilla crashes with evidence of memory corruption - passed
* Passed Internet Explorer createTextRange arbitrary code execution - passed
* Passed Windows MDAC ADODB ActiveX control invalid length - passed
* Passed Adobe Flash Player video file parsing integer overflow - passed
* Passed XMLDOM substringData() heap overflow - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.5) - passed
* Passed Opera JavaScript invalid pointer arbitrary code execution - passed
* Passed Apple QuickTime MOV file JVTCompEncodeFrame heap overflow - passed
* Passed Mozilla code execution via QuickTime Media-link files - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.8) - passed
* Passed Mozilla memory corruption vulnerabilities (rv:1.8.1.10) - passed
* Passed Mozilla crashes with evidence of memory corruption (rv:1.8.1.12) - passed
* Passed Apple QuickTime 'QTPlugin.ocx' ActiveX Control Multiple Buffer Overflows - passed
* Passed Window location property cross-domain scripting - passed
* Passed Mozilla Firefox MathML integer overflow - passed
* Passed Internet Explorer XML nested SPAN elements memory corruption - passed
Congratulations! The test has found no vulnerabilities in your browser!
http://www.aijaa.com/v.php?i=4895380.jpg
____________________________________________________________________________________
Your browser reports to be: "Opera/9.80 (Windows NT 5.1; U; fi) Presto/2.2.15 Version/10.00" Browser name: Opera
Version: 9.80
Platform: Windows XP
Test results
Mozilla crashes with evidence of memory corruption - passed
Internet Explorer bait & switch race condition - passed
Mozilla crashes with evidence of memory corruption - passed
Internet Explorer createTextRange arbitrary code execution - passed
Windows MDAC ADODB ActiveX control invalid length - passed
Adobe Flash Player video file parsing integer overflow - passed
XMLDOM substringData() heap overflow - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.5) - passed
Opera JavaScript invalid pointer arbitrary code execution - passed
Apple QuickTime MOV file JVTCompEncodeFrame heap overflow - passed
Mozilla code execution via QuickTime Media-link files - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.8) - passed
Mozilla memory corruption vulnerabilities (rv:1.8.1.10) - passed
Mozilla crashes with evidence of memory corruption (rv:1.8.1.12) - passed
Apple QuickTime 'QTPlugin.ocx' ActiveX Control Multiple Buffer Overflows - passed
Window location property cross-domain scripting - passed
Mozilla Firefox MathML integer overflow - passed
Internet Explorer XML nested SPAN elements memory corruption - passed
Congratulations! The test has found no vulnerabilities in your browser!
http://www.aijaa.com/v.php?i=4895387.jpg
Käytä sinäkin turvallista internet explorer selainta :D
>>Internet Explorer huolettaa viranomaisia Suomessakin
18.1.2010 11:07 Suomalaiset viranomaiset ovat huolestuneet ohjelmistoyhtiö Microsoftin Internet Explorer -selaimessa havaituista tietoturva-aukoista. Viestintäviraston Cert-fi kehottaa huomiomaan Auroraksi kutsutun hyökkäysmenetelmän uhkan.
Tietoturvayksikkö Cert-fi kertoi sunnuntaina verkkosivuillaan Auroraksi ristitystä hyökkäysmenetelmästä. Menetelmää ja siitä julkaistua Metasploit-moduulia käyttäen on helppo hyökätä haavoittuviin koneisiin.
Suosittele
1 suositus
Tulosta
Pdf-versio
Kuuntele
Kommentoi
Lähetä kaverille
– On odotettavissa, että haavoittuvuutta pyritään lähiaikoina käyttämään aktiivisesti hyväksi, Cert-fi arvioi sivuillaan.
Microsoftin selaimen paikkaamaton haavoittuvuus havaittiin viime viikolla.
Hyökkäykset on mahdollista torjua erityisellä DEP-paketilla. IE:n 8-versio käyttää DEP:tä automaattisesti Windows XP Service Pack 3 -, Windows Vista Service Pack 1 -, Windows Vista Service Pack 2- ja Windows 7 -ympäristöissä.
Saksan viranomaiset antoivat varoitukset IE:stä viikonloppuna sen jälkeen, kun kävi ilmi, että selaimen haavoittuvuutta käytettiin hyväksi hakukoneyhtiö Googlen palveluihin kohdistuneissa verkkohyökkäyksissä.