{"id":147179,"date":"2018-02-20T14:13:42","date_gmt":"2018-02-20T14:13:42","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/es\/?p=147179"},"modified":"2025-06-13T00:52:17","modified_gmt":"2025-06-12T22:52:17","slug":"google-microsoft-se-pegan-bugs-edge-soc","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/es\/google-microsoft-se-pegan-bugs-edge-soc\/","title":{"rendered":"Google revela un bug peligroso antes de que Microsoft, su responsable, pueda arreglarlo"},"content":{"rendered":"<p>Bienvenido al <strong>round 54<\/strong> del duelo Google vs Microsoft.<\/p>\n<p>Google ha revelado <strong>detalles de una vulnerabilidad de seguridad encontrada en Microsoft Edge&#8230;<\/strong> antes de que Microsoft pudiera desarrollar un parche para solucionarlo. Recuerdo que Edge es competencia directa de Google Chrome.<\/p>\n<p>En concreto, ha sido Project Zero, el equipo de investigadores de seguridad de Google, quien ha informado del problema. La pol\u00edtica de Project Zero es avisar a la empresa afectada por un bug con <strong>90 d\u00edas de cortes\u00eda<\/strong>, tres meses de tiempo para que la empresa pueda solventar el l\u00edo antes de que el equipo de Google haga publico el descubrimiento. Este caso no es una excepci\u00f3n: Project Zero alert\u00f3 a Microsoft sobre el bug en noviembre de 2017.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-147189\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/2\/2018\/02\/microsoft-edge.jpg\" alt=\"\" width=\"600\" height=\"337\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/microsoft-edge.jpg 600w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/microsoft-edge-300x169.jpg 300w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/microsoft-edge-238x134.jpg 238w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/microsoft-edge-436x246.jpg 436w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/microsoft-edge-370x208.jpg 370w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/microsoft-edge-304x170.jpg 304w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<div style=\"text-align:center; width:100%; margin:12px 0;\">\r\n<script type=\"text\/javascript\">\r\n  google_ad_client = \"ca-pub-8132844949421936\";\r\n  var google_ad_slot = '9677578764';\r\n  if (window.innerWidth <= 470) {\r\n    google_ad_width = 300;\r\n    google_ad_height = 50;\r\n  }\r\n  else if (window.innerWidth < 1360) {\r\n    google_ad_width = 468;\r\n    google_ad_height = 60;\r\n  }\r\n  else {\r\n    google_ad_width = 728;\r\n    google_ad_height = 90;\r\n  }\r\n<\/script>\r\n<script type=\"text\/javascript\"\r\nsrc=\"\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\r\n<\/script>\r\n<\/div>\n<p>Adem\u00e1s, en esta ocasi\u00f3n Project Zero ha dado dos semanas extras a Microsoft por petici\u00f3n de la misma para acabar de arreglar el desaguisado.\u00a0 Misi\u00f3n fallida: <strong>el bug sigue campando por sus anchas,<\/strong> como una cucaracha que se ha apoderado de la cocina y no se va ni con una bomba nuclear. Es una se\u00f1al de que el bug no solo es serio sino que adem\u00e1s es dif\u00edcil de erradicar.<\/p>\n<p>La buena noticia es que Microsoft planea solucionar este error <strong>en un parche que saldr\u00e1 en marzo.<\/strong> La mala noticia es que hasta entonces los hackers pueden beneficiarse de esta informaci\u00f3n.<\/p>\n<p>Con la decisi\u00f3n de comunicar el problema, <strong>Google ha convertido Edge en un explorador menos seguro<\/strong>, aumentando as\u00ed las posibilidades de que los usuarios instalen Chrome. No puedo ser menos sutil.<\/p>\n<p>El bug en s\u00ed es una iron\u00eda con patas. En abril de 2017, Microsoft agreg\u00f3 a Edge una caracter\u00edstica llamada <strong>Arbitrary Code Guard (ACG)<\/strong>. Su funci\u00f3n era robustecer el navegador para evitar que los atacantes ejecutaran un c\u00f3digo malicioso en los ordenadores que usaran Edge. Este bug es, a grandes rasgos, una forma de eludir el ACG, una forma que no existir\u00eda sin ACG.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-147190\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/2\/2018\/02\/google.jpg\" alt=\"\" width=\"600\" height=\"300\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/google.jpg 600w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/02\/google-300x150.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<div style=\"text-align:center; width:100%; margin:12px 0;\">\r\n<script type=\"text\/javascript\">\r\n  google_ad_client = \"ca-pub-8132844949421936\";\r\n  var google_ad_slot = '9677578764';\r\n  if (window.innerWidth <= 470) {\r\n    google_ad_width = 300;\r\n    google_ad_height = 50;\r\n  }\r\n  else if (window.innerWidth < 1360) {\r\n    google_ad_width = 468;\r\n    google_ad_height = 60;\r\n  }\r\n  else {\r\n    google_ad_width = 728;\r\n    google_ad_height = 90;\r\n  }\r\n<\/script>\r\n<script type=\"text\/javascript\"\r\nsrc=\"\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\r\n<\/script>\r\n<\/div>\n<p>El bug en cuesti\u00f3n puede <strong>convertirse en una puerta<\/strong> para que un atacante ejecute malware en el equipo de una v\u00edctima que utilice Edge asiduamente. Si acabas de escuchar un &#8220;\u00a1boom!&#8221; era tu medidor de iron\u00edas explotando en el armario donde lo guardaste. No obstante, como es un ataque dif\u00edcil de llevar a cabo Google\u00a0 lo considera un fallo de gravedad media.<\/p>\n<p><strong>Si te mola arriesgarte<\/strong>, aqu\u00ed tienes Microsoft Edge:<\/p>\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_optimized,f_auto\/p\/449d6486-96d2-11e6-b4e2-00163ec9f5fa\/4027609062\/microsoft-edge-logo.png\" alt=\" Microsoft Edge\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\"> Microsoft Edge<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/microsoft-edge.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Descargar<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--60\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"60\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"6\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\">6<\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/microsoft-edge.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n<p>Y aqu\u00ed tienes Google Chrome, <strong>ya que estamos:<\/strong><\/p>\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_optimized,f_auto\/p\/b2e6d43a-96bf-11e6-a674-00163ed833e7\/2551395796\/google-chrome-logo.png\" alt=\"Google Chrome \" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Google Chrome <\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"Descargar\" target=\"_self\" rel=\"noopener noreferrer\">Descargar<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--100\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"100\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"10\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\">10<\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"Descargar\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n<p>Ha habido ocasiones en donde Google ha jorobado m\u00e1s descaradamente a Microsoft. En una ocasi\u00f3n, Google revel\u00f3 una vulnerabilidad grave de un producto de Microsoft <strong>tan solo diez d\u00edas despu\u00e9s de descubrirla<\/strong>. En otras ocasiones Google tambi\u00e9n ha revelado fallos de D\u00eda Cero, es decir, bugs que se revelan el mismo d\u00eda de su descubrimiento.<\/p>\n<p>En otras ocasiones, Google ha ido m\u00e1s de tranquis y de guays. Es el caso de las famosas vulnerabilidades <strong>Meltdown y Spectre.<\/strong><\/p>\n<div style=\"text-align:center; width:100%; margin:12px 0;\">\r\n<script type=\"text\/javascript\">\r\n  google_ad_client = \"ca-pub-8132844949421936\";\r\n  var google_ad_slot = '9677578764';\r\n  if (window.innerWidth <= 470) {\r\n    google_ad_width = 300;\r\n    google_ad_height = 50;\r\n  }\r\n  else if (window.innerWidth < 1360) {\r\n    google_ad_width = 468;\r\n    google_ad_height = 60;\r\n  }\r\n  else {\r\n    google_ad_width = 728;\r\n    google_ad_height = 90;\r\n  }\r\n<\/script>\r\n<script type=\"text\/javascript\"\r\nsrc=\"\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\r\n<\/script>\r\n<\/div>\n<div class=\"sc-card-starred-link\">\r\n  <div class=\"sc-card-starred-link__body\">\r\n    <div class=\"sc-card-starred-link__row clearfix\">\r\n      <div class=\"sc-card-starred-link__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-starred-link__img\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/2\/2018\/01\/meltdown-spectre_edited-1-1024x576.jpg\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-starred-link__col-title\">\r\n        <p class=\"sc-card-starred-link__title\">Meltdown y Spectre: 2 fallos de seguridad que afectan a casi todos los PCs. Comprueba si tambi\u00e9n al tuyo<\/p>\r\n        <a class=\"sc-card-starred-link__button\" href=\"https:\/\/www.softonic.com\/articulos\/meltdown-spectre-fallos-pc-como-prevenir-soc\/\" target=\"_blank\" rel=\"noopener noreferrer sponsored\">Leer m\u00e1s<\/a>\r\n      <\/div>\r\n    <\/div>\r\n    <a class=\"sc-card-starred-link__link\" href=\"https:\/\/www.softonic.com\/articulos\/meltdown-spectre-fallos-pc-como-prevenir-soc\/\" target=\"_blank\" rel=\"noopener noreferrer sponsored\"><\/a>\r\n  <\/div>\r\n<\/div>\n<p>Google dio a los fabricantes <strong>seis meses<\/strong> para resolver sus problemas antes de revelarlos al p\u00fablico mundano.<\/p>\n<p>\u00bfCrees que Project Zero act\u00faa bien con su pol\u00edtica de comunicar los errores que encuentra antes de que las compa\u00f1\u00edas responsables puedan arreglarlo? <strong>\u00a1D\u00e9janos tu opini\u00f3n!<\/strong> Y nos vemos en el round 55.<\/p>\n<div style=\"text-align:center;width:100%\">\r\n<script type=\"text\/javascript\">\r\nvar google_ad_client = \"ca-pub-8132844949421936\";\r\nvar google_ad_slot = '9677578764';\r\nvar google_ad_width = 300;\r\nvar google_ad_height = 250;\r\n<\/script>\r\n<script type=\"text\/javascript\"\r\nsrc=\"\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\r\n<\/script>\r\n<\/div>\n<p>Fuentes: <a href=\"https:\/\/omicrono.elespanol.com\/2018\/02\/google-publica-bug-sin-solucionar\/\" target=\"_blank\" rel=\"noopener noreferrer\">Omicrono<\/a>, <a href=\"https:\/\/www.tuexperto.com\/2018\/02\/19\/google-hace-publico-un-agujero-de-microsoft-edge-antes-de-tener-solucion\/\" target=\"_blank\" rel=\"noopener noreferrer\">Tu Experto<\/a>, <a href=\"https:\/\/www.fayerwayer.com\/2018\/02\/google-descubre-error-microsoft-edge\/\" target=\"_blank\" rel=\"noopener noreferrer\">FayerWayer<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bienvenido al round 54 del duelo Google vs Microsoft. Google ha revelado detalles de una vulnerabilidad de seguridad encontrada en Microsoft Edge&#8230; antes de que Microsoft pudiera desarrollar un parche para solucionarlo. Recuerdo que Edge es competencia directa de Google Chrome. En concreto, ha sido Project Zero, el equipo de investigadores de seguridad de Google, &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/es\/google-microsoft-se-pegan-bugs-edge-soc\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Google revela un bug peligroso antes de que Microsoft, su responsable, pueda arreglarlo&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2057,"featured_media":140894,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[9706],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-147179","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-how-to"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/147179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/users\/2057"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/comments?post=147179"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/147179\/revisions"}],"predecessor-version":[{"id":372307,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/147179\/revisions\/372307"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media\/140894"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media?parent=147179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/categories?post=147179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/tags?post=147179"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/usertag?post=147179"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/vertical?post=147179"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/content-category?post=147179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}