PCSL

Size: px

Start display at page:

Download "PCSL"

铺杨
5 years ago
Views:

1 2014 PC SECURITY LABS Windows XP Operation System Exploit Test Microsoft Office COMPARATIVES PPStream GLItemCom.DLL Internet Explorer Thunder

2 目录 1. 测试背景测试说明待测软件信息测试结果测试方简介权利说明免责声明

3 1. 测试背景 2001 年 10 月微软发布视窗操作系统 Windows XP, 十余载后微软此前宣布对 Windows XP 的支持在 2014 年 4 月 8 日结束随着科技发展的日新月异, 云计算移动社交大数据等新兴信息技术的快速发展, Windows XP 已经很难满足用户的需求, 也不足以应对当前的网络安全威胁由于微软官方对 Windows XP 的技术支持已经停止,Windows XP 将面临着各种已知或未知的漏洞攻击引起的危险为此我们推出漏洞测试来测试各种安全软件对于已知漏洞的防护能力, 以确保安全软件能更有效地对电脑进行保护漏洞是指一个系统存在的弱点或缺陷, 系统对特定威胁攻击或危险事件的敏感性, 或进行攻击的威胁作用的可能性漏洞可能来自应用软件或操作系统设计时的缺陷或编码时产生的错误, 也可能来自业务在交互处理过程中的设计缺陷或逻辑流程上的不合理之处这些缺陷错误或不合理之处可能被有意或无意地利用, 从而对一个组织的资产或运行造成不利影响, 如信息系统被攻击或控制, 重要资料被窃取, 用户数据被篡改, 系统被作为入侵其他主机系统的跳板本次测试选用 Windows XP 作为靶机验证各安全软件对漏洞的防护能力本次测试仅对是否防护漏洞执行成功进行评价, 不代表最终防护能力 2. 测试说明判断防护是否成功的标准为 1. 安全产品导致漏洞触发无法成功视为防护成功, 若触发成功则视为失败如 Shellcode 成功执行视为防护失败如文件监控干扰漏洞防护测试, 则关闭文件监控如被测产品使用强制重启, 蓝屏等方式导致漏洞触发失败的, 视为防护成功 2. 本次测试环境仅限于 Windows XP, 由于漏洞触发条件的不同, 故不保证为 Windows XP 中某一个具体的版本 2

4 3. 待测软件信息软件名称厂商版本号 avast! Free Antivirus AVAST AVG Internet Security AVG Avira Antivirus Free Avira Bitdefender Internet Security Bitdefender ESET NOD32 Antivirus ESET 卡巴斯基反病毒软件 Kaspersky Lab (f) 新毒霸 Kingsoft 2013.SP 安全卫士 Qihoo 电脑管家 Tencent

5 4. 测试结果环境及漏洞名称 Qihoo360 Avira Kaspersky AVG Bitdefender Windows XP SP2+IE6+Office2003 Windows XP SP3+IE6+Office2003 联众世界游戏大厅 GLItemCom.DLL ActiveX 控件堆溢出漏洞 pass failed pass failed failed MS pass 不支持 XP SP3 不支持 XP SP3 pass 不支持 XP SP3 MS06-14 pass 不支持 XP SP3 不支持 XP SP3 failed 不支持 XP SP3 PPStream 堆栈溢出漏洞 pass failed pass pass pass 超星阅览器 ActiveX 控件栈溢出漏洞 pass failed pass pass pass 暴风影音 II mps.dll ActiveX 栈溢出漏洞 pass failed pass pass pass 迅雷 5 漏洞 pass failed pass failed pass MS pass failed failed failed failed MS pass failed pass pass failed MS failed failed failed failed failed MS pass failed pass failed failed MS pass failed failed failed failed MS failed failed failed failed failed 不支持 XP SP3 不支持 XP SP3 不含防火墙不支持 XP SP3 以下的版本以下的版本排除测试文以下的版本备注 MS 文件监控提示拦件, 开启 LinkScanner 截 html 文件但关闭 Online 是漏洞仍然触 Shield, 排发成功除测试漏洞网页文件后本地执行均放过, 需要构建 URL 才能触发拦截功能 4

6 环境及漏洞名称 Tencent Kingsoft AVAST ESET 备注 Windows XP SP2+IE6+Office2003 Windows XP SP3+IE6+Office2003 联众世界游戏大厅 GLItemCom.DLL failed pass pass failed ActiveX 控件堆溢出漏洞 MS failed pass pass failed MS06-14 failed pass pass failed PPStream 堆栈溢出漏洞 failed pass pass failed classid:5ec7c511-cd0f-42e6-830c- 1BD9882F3458 超星阅览器 ActiveX 控件栈溢出漏洞 failed pass pass failed 暴风影音 II mps.dll ActiveX 栈溢出漏洞 failed pass pass failed 迅雷 5 漏洞 failed pass pass failed MS failed failed failed failed MS failed pass pass failed MS failed failed failed failed 若网页跳转失败, 则使用打开远程路径方式进行触发 MS failed pass pass failed MS failed failed failed failed MS failed failed failed failed 弹出是否允测试页面测试许程序执行已添加排页面备注框的均视为除已添防护失败加排除提示尝试运行可疑对象视为防御失败 5

7 环境及漏洞名称 Qihoo360 Avira Kaspersky AVG Bitdefender Windows XP SP3+IE8+Office2007 MS pass failed pass failed failed MS pass failed failed failed failed cve IE 启动 pass failed failed failed failed cve IE 启动 pass failed pass failed failed 备注 cve 蓝屏, 视为通过产品名称 Tencent Kingsoft AVAST ESET Windows XP SP3+IE8+Office2007 MS failed pass pass failed MS failed failed pass failed cve IE 启动 failed failed failed failed cve IE 启动 failed failed failed failed 备注结果小结厂商 Qihoo360 AVAST Kingsoft Kaspersky AVG Bitdefender Avira ESET Tencent 拦截 Pass 未拦截 Failed 操作系统不支持 N/A

8 5. 测试方简介 PC 安全实验室 ( 简称 :PCSL) 成立于 2008 年 3 月, 是一个致力于安全软件测试和相关测试标准研发的中立测评机构, 并已加入国际反恶意软件测试标准组织 AMTSO 和亚洲反病毒研究者协会 AVAR 成为独立会员 PCSL 主办方为辰翔信息科技有限公司, 位于浙江省嘉兴市作为一家专业的计算机安全软硬件及 IT 软硬件的咨询测试公司, 为用户选择 IT 产品提供参考公司将在传统的 PC 端安全软件咨询测试的基础上逐步开展 PC 端通用软件服务器安全软件及其他通用软硬件的咨询与测试工作联系地址 : 浙江省嘉兴市南湖区凌公塘路 3339 号科创中心 3 号楼 TEL: FAX: Mail:info@pitci.com 6. 权利说明除非另有说明, 嘉兴市辰翔信息科技有限公司 ( 简称辰翔科技, 下同 ) 拥有本报告的版权, 未经辰翔科技事先书面授权许可, 任何机构或个人无权擅自更改本报告内容或以任何方式以商业目的而使用本报告 ( 包括但不限于发送传播复印摘编等 ) 本报告中所使用的辰翔科技商标服务标识及标记, 除非另有说明, 均为辰翔科技的商标服务标识及标记, 辰翔科技对此拥有版权, 任何侵犯辰翔科技版权之行为, 均为违法行为, 辰翔科技将对此依法追究侵权人相关法律责任 Unless otherwise stated, Jiaxing Chenxiang Information Technology Co., Ltd. (hereinafter referred to as Chenxiang Information Technology ) owns the copyright of this report. Without prior written consent of Chenxiang Information Technology,no other unit or individual shall have the right to alter the contents of this report and use this report for commercial purposes by any means (including but not limited to transmission, dissemination, reproduction, excerpt, etc.). Unless otherwise stated, Chenxiang Information Technology shall be the rightful owner of the trademarks, service marks of Chenxiang Information Technology used in the report. Any action of infringing upon the legal rights of Chenxiang Information Technology is prohibited, Chenxiang Information Technology shall have the right to pursue the legal liability of the infringer in accordance with the law. 7

9 7. 免责声明辰翔科技在此特别提醒, 在使用本公司报告前, 请认真阅读充分理解本声明中各条款, 包括免除或限制辰翔科技责任的免责条款及对用户的权利限制, 如果您对本声明中的任何条款表示异议, 可以选择不使用本报告, 您使用本报告的行为将被视为对本声明全部内容的认可, 并同意接受本声明全部条款的约束 1 本报告由辰翔科技向读者提供, 所载全部内容仅系提供读者参考之用, 并不构成对其选择购买使用产品之建议, 也不构成对其选择购买使用报告中所涉产品的邀请或保证辰翔科技不担保内容的绝对准确性和完整性, 读者不应单纯依靠本报告而取代个人的独立判断, 辰翔科技建议读者如有任何疑问, 应当咨询国家相关部门并进行独立选择购买或使用判断 2 本报告所载内容为辰翔科技在报告发表日当日对有关产品性状的判断, 在其它不同日期辰翔科技可发出与本报告内容不一致或有不同结论的报告, 但辰翔科技无义务或责任为此将原报告涉及内容及时更新并由此通知读者, 在此情形下辰翔科技不对读者因使用本报告所产生的损失负任何责任 3 本报告可能附带其它网站的地址或超级链接, 目的纯粹是为了读者使用方便, 所链接网站的内容不构成本报告的任何部分, 读者需自行承担浏览该类网站的风险费用或者损失同时辰翔科技不对此类网站的内容 ( 包括但不限于广告产品或其他资料 ) 的真实性完整性准确性及合法性负责或保证, 读者使用或依赖任何此类网站或经由此类网站获得的任何内容商品或服务所产生的任何损害或损失, 辰翔科技不承担任何直接或间接法律责任 4 辰翔科技可能与生产本报告涉及产品的公司间已存在或将存在业务关系, 但无需事先或在将来建立业务关系后通知其他读者 5 读者接收本报告并不视为和辰翔科技建立业务关系, 辰翔科技无需因此而对其承担类似客户关系情形下的任何法律责任 6 所有辰翔科技报告测试对象之产品样品, 系辰翔科技于正规合法销售渠道购买之产品, 故本报告内容仅适合于从正规合法渠道购买之产品, 而不适于从其他渠道所得之产品, 读者使用非正规合法销售渠道产品所产生的任何风险或损失, 与辰翔科技无关, 在此情形下辰翔科技概不承担任何法律责任 7 本报告可能会涉及公司或个人所有的商标或其相关照片图案, 若任何单位或个人认为涉嫌侵犯其合法权益, 可及时与辰翔科技联系, 以便辰翔科技迅速作出处理对上述声明的解释修改及更新权属辰翔科技所有 8

10 Notice that before using the report issued by Jiaxing Chenxiang Information Technology Co. Ltd(hereinafter referred to as Chenxiang Information Technology ), please carefully read and fully understand the terms and conditions of this disclaimer (hereinafter referred to as Disclaimer ), including the clauses of exclusion or restriction of the liabilities of Chenxiang Information Technology and the limitation the rights of users. If you have any objection to the terms and conditions of this Disclaimer, you have the right not to use this report, the act of using this report will be regarded as an acceptance and the recognition of the terms and conditions of this Disclaimer, so by using this report, you agree to the following terms and conditions: 1 The report is provided by Chenxiang Information Technology, all the contents contained herein are for reference purpose only, but will not be regarded as the suggestion, invitation or warranty for readers to choose, purchase or use the products mentioned herein. Chenxiang Information Technology will not guarantee the absolute accuracy and completeness of the contents of the report, you should not rely solely on this report or substitute the viewpoints of the report for your independent judgment. If you have any queries, please consult the relevant departments of the State and then choose, purchase or use products by your independent judgment. 2 The contents contained herein is the judgment made by Chenxiang Information Technology to the product characteristics as of the date of the report published, in the future Chenxiang Information Technology will have the right to issue the new reports which contain different contents or draw different conclusions, but Chenxiang Information Technology has no obligation or responsibility to update the original report or inform readers of the update of it, in this case, Chenxiang Information Technology will bear no responsibility for readers loss of using the original report. 3 The report may contain links to other websites, which are provided solely for readers convenience to use, the contents of the linked websites are not any part of this report. Readers shall assume the risks and losses or bear the costs when visiting such websites, Chenxiang Information Technology will not guarantee the authenticity, completeness, accuracy and legitimacy of the contents of such websites (including but not limited to advertising, products or other information). Chenxiang Information Technology does not accept any liability (direct or indirect) for readers damages or losses arising from their clicking on or viewing such websites to obtain some information, products or service. 9

11 4 Chenxiang Information Technology may have or will have a business relationship with the companies which produce the products mentioned in this report, but has no obligation to notify readers about it, no matter there has already been or there will be such business relationship in the future. 5 The act of readers receiving this report are not regarded as the establishment of the business relationship between readers and Chenxiang Information Technology, so there is no customer relationship existing, Chenxiang Information Technology does not accept any legal liability as the readers customer. 6 The products which are used to be tested as the samples by Chenxiang Information Technology are bought through official way and legal means, so the report is proper for products bought through official way and legal means, not for products bought through unofficial way and illegal means. Therefore it s the users buying such products who will be responsible for any risk or loss arising therefrom. Chenxiang Information Technology will not have or accept any liability whatsoever for any such risk or loss. 7 Some trademarks, photos or patterns owned by units or individuals will probably be used in this report, if you think your legal right and interests are infringed, please contact Chenxiang Information Technology promptly, Chenxiang Information Technology will handle the matter as quickly as possible. Chenxiang Information Technology reserves the rights to interpret, modify and update the Disclaimer. 10

PCSL

PCSL 2014 PC SECURITY LABS Windows XP Operation System Exploit Test Microsoft Office COMPARATIVES PPStream GLItemCom.DLL Internet Explorer Thunder 目录 1. 测试背景... 2 2. 测试说明... 2 3. 待测软件信息... 3 4. 测试结果... 4 5.