{"id":6361,"date":"2014-09-17T07:00:11","date_gmt":"2014-09-17T07:00:11","guid":{"rendered":"http:\/\/megahost.ro\/blog\/?p=6361"},"modified":"2014-09-17T07:00:11","modified_gmt":"2014-09-17T07:00:11","slug":"multe-dispozitive-android-vulnerabile-datorita-browser-ului-default","status":"publish","type":"post","link":"https:\/\/megahost.ro\/blog\/multe-dispozitive-android-vulnerabile-datorita-browser-ului-default.html","title":{"rendered":"Multe dispozitive Android vulnerabile datorita browser-ului default"},"content":{"rendered":"<p><a href=\"https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2014\/09\/androiddefault.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft  wp-image-6362\" src=\"https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2014\/09\/androiddefault-300x272.png\" alt=\"androiddefault\" width=\"170\" height=\"154\" srcset=\"https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2014\/09\/androiddefault-300x272.png 300w, https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2014\/09\/androiddefault.png 433w\" sizes=\"auto, (max-width: 170px) 100vw, 170px\" \/><\/a>Browser-ul default din versiunile Android mai vechi de 4.4 prezinta o vulnerabilitate care permite site-urilor malware sa treaca de un mecanism critic de securitate si sa preia controlul sesiunilor de autentificate de pe alte site-uri ale unui utilizator.<\/p>\n<p>Problema provine de la modul in care browser-ul manipuleaza javascript atunci cand sirurile de caractere sunt precedate de un caracter octet nul. Cand se confrunta cu un astfel de sir, browser-ul nu reuseste sa puna in aplicare o anumita politica de securitate (same-origin policy) care previne un script care ruleaza in contextul unui site sa interactioneze cu continutul altor site-uri.<\/p>\n<p>Aceasta vulnerabilitate a fost descoperita de cercetatorul de securitate independent Rafay Baloch, care a publicat-o pe blogul sau pe data de 31 august. Cu toate acestea, bug-ul a ramas in mare parte neobservat pana cand echipa Metasploit a dezvoltat un modul care putea fi folosit pentru a fura cookie-urile de autentificare de la utilizatorii care deschideau o pagina malware.<\/p>\n<p>Clientii <a href=\"https:\/\/megahost.ro\/\">megahost<\/a> care cred ca ar putea fi afectati de acest bug sunt sfatuiti sa-si instaleze unul din celelalte browsere disponibile pentru Android, cum ar fi Google Chrome, Mozilla Firefox, Dolphin Browser sau Opera, care nu sunt afectate de aceasta problema.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Browser-ul default din versiunile Android mai vechi de 4.4 prezinta o vulnerabilitate care permite site-urilor malware sa treaca de un mecanism critic de securitate si sa preia controlul sesiunilor de autentificate de pe alte site-uri ale unui utilizator.<\/p>\n","protected":false},"author":1,"featured_media":6362,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47,5,6,121],"tags":[107,82,687,684,7,689],"class_list":["post-6361","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet","category-securitate-online","category-sisteme-operare","category-software","tag-android","tag-browser","tag-internet","tag-securitate-online","tag-sisteme-de-operare","tag-software"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"Browser-ul default din versiunile Android mai vechi de 4.4 prezinta o vulnerabilitate care permite site-urilor malware sa treaca de un mecanism critic de securitate si sa preia controlul sesiunilor de autentificate de pe alte site-uri ale unui utilizator.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Istrator Admin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/megahost.ro\/blog\/multe-dispozitive-android-vulnerabile-datorita-browser-ului-default.html\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Multe dispozitive Android vulnerabile datorita browser-ului default | megahost.ro","description":"Browser-ul default din versiunile Android mai vechi de 4.4 prezinta o vulnerabilitate care permite site-urilor malware sa treaca de un mecanism critic de securitate si sa preia controlul sesiunilor de autentificate de pe alte site-uri ale unui utilizator.","canonical_url":"https:\/\/megahost.ro\/blog\/multe-dispozitive-android-vulnerabile-datorita-browser-ului-default.html","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null},"aioseo_meta_data":{"post_id":"6361","title":"Multe dispozitive Android vulnerabile datorita browser-ului default | megahost.ro","description":"Browser-ul default din versiunile Android mai vechi de 4.4 prezinta o vulnerabilitate care permite site-urilor malware sa treaca de un mecanism critic de securitate si sa preia controlul sesiunilor de autentificate de pe alte site-uri ale unui utilizator.","keywords":[{"label":"android","value":"android"},{"label":"browser","value":"browser"},{"label":"internet","value":"internet"},{"label":"securitate online","value":"securitate online"},{"label":"sisteme de operare","value":"sisteme de operare"},{"label":"software","value":"software"}],"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-20 22:18:48","updated":"2025-06-04 04:41:59","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/megahost.ro\/blog\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/megahost.ro\/blog\/category\/securitate-online\" title=\"Securitate Online\">Securitate Online<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tMulte dispozitive Android vulnerabile datorita browser-ului default\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/megahost.ro\/blog\/"},{"label":"Securitate Online","link":"https:\/\/megahost.ro\/blog\/category\/securitate-online"},{"label":"Multe dispozitive Android vulnerabile datorita browser-ului default","link":"https:\/\/megahost.ro\/blog\/multe-dispozitive-android-vulnerabile-datorita-browser-ului-default.html"}],"_links":{"self":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/6361","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/comments?post=6361"}],"version-history":[{"count":0,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/6361\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media\/6362"}],"wp:attachment":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media?parent=6361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/categories?post=6361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/tags?post=6361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}