: Microsoft Corp is rushing to fix a bug in its widely used : Internet Explorer web browser after a computer security : firm disclosed the flaw over the weekend, saying hackers : have already exploited it in attacks on some U.S. companies. 在一家网路安全公司揭露一个缺陷後的整个周末，Microsoft忙於料理一个Internet Explorer浏览器上被广泛利用的漏洞，据传已经有hacker使用该漏洞对位於美国的一些企 业进行攻击。 : Microsoft disclosed on Saturday its plans to fix the bug, : which targets Internet Explorer versions 9 through 11. Microsoft於周六揭晓关於修复该漏洞的计画，主要将针对Internet Explorer 9到11版。 : Those versions take up 26.25 percent of the browser market, : according to FireEye, the cybersecurity software company : that caught the bug. 由FireEye，这个抓到本漏洞的网路安全公司所做的统计；这些将被修正的版本约占了浏览 器市场的26.25%。 : The bug, however, reportedly affects versions 6 through 11. : Together, those versions dominate desktop browsing, accounting : for 55 percent of the PC browser market, according to tech : research firm NetMarketShare. 然而，这个漏洞据报会影响到Internet Explorer 6至11版，根据由科技研究公司 NetMarketShare的资料，所有受影响的版本占了整个PC浏览器55%的市占率。 : Microsoft is rushing to fix a bug in its widely used : Internet Explorer web browser after a computer security firm : disclosed the flaw over the weekend (本段与第一段重复，故省略) : PCs running Windows XP will not receive any updates fixing that : bug when they are released, however, because Microsoft stopped : supporting the 13-year-old operating system earlier this month. 然而，使用Windows XP的PC将不会收到任何修复这项漏洞的更新，因为在本月稍早， Microsoft已经终止了对这个有13年历史的作业系统的支援。 : Security firms estimate that between 15 and 25 percent of the : world's PCs still run Windows XP. 网路安全公司估计全球有15%到25%的PC仍在执行Windows XP。 : FireEye Inc said that a sophisticated group of hackers have been : exploiting the bug in a campaign dubbed 'Operation Clandestine Fox.' FireEye公司表示有群经验老到的Hacker已经在名为"Operation Clandestine Fox"的攻击 行动中使用了这个漏洞。 : FireEye, whose Mandiant division helps companies respond to cyber : attacks, declined to name specific victims or identify the group : of hackers, saying that an investigation into the matter is still : active. It described the hackers as 'extremely proficient at lateral : movement' and 'difficult to track.' FireEye旗下，负责协助企业面对网路攻击的Mandiant部门，不便透漏受害者或是与hacker 组织相关的名字，该部门表示对此漏洞的相关调查仍在进行中。这显示这群hacker"相当熟 练於旁敲侧击"而且"难以追踪"。 : 'It's a campaign of targeted attacks seemingly against U.S.-based : firms, currently tied to defense and financial sectors,' FireEye : spokesman Vitor De Souza said via email. 'It's unclear what the : motives of this attack group are, at this point. It appears to be : broad-spectrum intel gathering.' "这似乎是针对美国那些与国防、金融产业息息相关的公司所进行的攻击行动"FireEye的发 言人Vitor De Souza透过e-mail发表评论。"目前还不清楚发动攻击组织的动机是什麽。 It appears to be broad-spectrum intel gathering.(这句不会翻)" : He declined to elaborate, though he said one way to protect against : them would be to switch to another browser. 尽管他没有明说，透过他所说的话，另一个与之抗衡的方式可能是切换至另一个浏览器。 : The bug reportedly affects versions 6 through 11 of Internet Explorer 这个漏洞获报会影响6到11版的Internet Explorer。 : Microsoft said in the advisory that the vulnerability could allow : a hacker to take complete control of an affected system, then do things : such as viewing changing, or deleting data, installing malicious : programs, or creating accounts that would give hackers full user rights. Microsoft在公告中表示该弱点能允许Hacker获得系统的完整控制权，然後进行如 viewing changing(这个看不懂)、删除资料、安装恶意程式、或是建立一个拥有完整权限 的使用者帐号等行动。 : FireEye and Microsoft have not provided much information about the : security flaw or the approach that hackers could use to figure out how : to exploit it, said Aviv Raff, chief technology officer of cybersecurity : firm Seculert. "FireEye和Microsoft并没有提供更多关於这个安全弱点或是Hacker可以用它来做什麽的资 讯。"Seculert网路安全公司的首席技术员Aviv Raff这麽说。 : Yet other groups of hackers are now racing to learn more about it so : they can launch similar attacks before Microsoft prepares a security : update, Raff said. "其他Hacker们正快马加鞭地从中学习(即Operation Clandestine Fox)，好叫他们可以在 Microsoft释出安全更新前发动类似的攻击"Raff继续说。 : 'Microsoft should move fast,' he said. 'This will snowball.' "Microsoft得动作快了"他说"这会像雪球一样越滚越大" : Still, he cautioned that Windows XP users will not benefit from that : update since Microsoft has just halted support for that product. 然後，他提醒，Windows XP的使用者将不会因为这个更新而尝到甜头，因为Microsoft已经 终止了对这项产品的支援。 : The software maker said in a statement to Reuters that it advises : Windows XP users to upgrade to one of two most recently versions of : its operating system, Windows 7 or 8. 这家软体制造商(Microsoft)向Reuters(路透社)表示，它建议Windows XP使用者升级到旗 下两款最新的作业系统，Windows 7或8其中之一。 =============================================================================== 第一次翻译，如有翻得不妥，欢迎指证！也谢谢原PO的原文！ 话说这原文内容的重复率有点高(是因为是重点吗？) --

※ 发信站: 批踢踢实业坊(ptt.cc), 来自: 36.228.53.39 ※ 文章网址: http://webptt.com/cn.aspx?n=bbs/Browsers/M.1398695353.A.F04.html