12/03/06 18:47:56.43 Cv7a07Xj0
>>718
>>1の記事じゃ分かり辛いか？
RSA 2012: Zero-Day WebKit Flaw Allows Android Device Takeover
URLﾘﾝｸ(www.techweekeurope.co.uk)
> An unpublicised vulnerability in the WebKit browser code can be used to take
> control of Android devices, according to security start-up CrowdStrike.
どうやって公表されてないWebkitの脆弱性を修正するんだ？
Hidden browser flaw threatens iOS, Android
URLﾘﾝｸ(www.msnbc.msn.com)
> The vulnerability exists in WebKit, a software engine used by Google's Chrome
> Web browser and Apple's Safari browser. Testing their proof-of-concept hack on
> a Google Android-powered phone, the researchers from the security firm
> CrowdStrike were able to redirect the target smartphone's browser to a Chinese
> remote access tool capable of intercepting voice calls, tracking the phone's
> location and harvesting emails and texts.
ちなみにAndroidもiOSも同様に脆弱