微软 |4月多个清静误差通告
宣布时间 2020-04-160x00 误差概述
|
产品 |
CVE ID |
类 型 |
误差品级 |
远程使用 |
|
Windows OneDrive |
CVE-2020-0935 |
EoP |
严重 |
否 |
|
Adobe Font Manager |
CVE-2020-1020 |
RCE |
严重 |
是 |
|
Adobe Font Manager |
CVE-2020-0938 |
RCE |
严重 |
是 |
0x01 误差详情
微软于周二宣布了4月清静更新补丁，宣布了针对113个误差的修复程序。在这些误差中，有15个被分类为严重，93个被分类为主要，3个被分类为中等，2个被归类为低危。微软体现有两个0day先前已被果真披露，包括Windows OneDrive特权提升误差（CVE-2020-0935）和Adobe Font Manager库远程执行代码误差（CVE-2020-1020），并且后者和另一个误差（Adobe Font Manager库远程执行代码误差CVE-2020-0938）已在野外被使用。
CVE-2020-0935 是Windows OneDrive 权限提升误差。OneDrive for Windows Desktop 应用程序无法准确处置惩罚符号链接时，保存特权提升误差。乐成使用此误差的攻击者可能会笼罩导致升高状态的目的文件。要使用此误差，攻击者首先必需登录系统。然后，攻击者可以运行一个为使用此误差而经特殊设计的应用程序，从而控制受影响的系统。
CVE-2020-1020和CVE-2020-0938是Adobe字体管理器库远程代码执行误差。当 Windows Adobe Type Manager 库未准确处置惩罚经特殊设计的多主机 Adobe Type 1 PostScript 名堂字体时，Microsoft Windows 中保存远程代码执行误差。关于除 Windows 10 之外的所有系统，乐成使用此误差的攻击者可以远程执行代码。关于运行 Windows 10 的系统，乐成使用此误差的攻击者可以使用受限的特权和功效在 AppContainer 沙盒上下文中执行代码。攻击者可随后装置程序 ；审查、更改或删除数据 ；或者建设拥有完全用户权限的新帐户。攻击者可通过多种方法使用此误差，包括诱使用户翻开经特殊设计文档或在 Windows 预览窗格中审查。
0x02 影响规模
|
误差编号 |
受影响产品版本 |
|
CVE-2020-0935 |
OneDrive for Windows |
|
CVE-2020-1020 CVE-2020-0938 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1803 (Server Core Installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) |
0x03 处置惩罚建议
微软官方已经宣布补丁修复了上述误差，下载链接：
https://portal.msrc.microsoft.com/zh-cn/security-guidance/advisory/CVE-2020-0935
https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2020-1020
https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2020-0938
0x04 相关新闻
https://www.bleepingcomputer.com/news/microsoft/microsoft-april-2020-patch-tuesday-fixes-3-zero-days-15-critical-flaws/
0x05 参考链接
https://portal.msrc.microsoft.com/zh-cn/security-guidance
0x06 时间线
2020-04-14 微软官方宣布误差
京公网安备11010802024551号