¡¾Îó²îͨ¸æ¡¿Windows Cloud Files Mini Filter Driver ÍâµØÈ¨ÏÞÌáÉýÎó²î(CVE-2020-17103)

Ðû²¼Ê±¼ä 2026-05-19

Ò»¡¢Îó²î¸ÅÊö


0519Îó²î¸ÅÊö.png


Windows Cloud Files Mini Filter Driver(cldflt.sys)ÊÇWindowsÄÚºËÇý¶¯£¬ÓÃÓÚ¹ÜÀíÔÆ¶ËÎļþͬ²½Óëռλ·ûÎļþ²Ù×÷£¬Ö§³ÖFiles On-Demand¹¦Ð§£¬ÊµÏÖÍâµØÓëÔÆ¶ËÊý¾Ý͸Ã÷»á¼ûÓ뻺´æ¹ÜÀí£¬°ü¹ÜϵͳÓëÓ¦ÓöÔÔÆÎļþµÄ¸ßЧ¶Áд¡£

2026Äê5ÔÂ19ÈÕ£¬×ðÁú¿­¹ÙÍøÈë¿ÚÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Windows Cloud Files Mini Filter DriverÍâµØÈ¨ÏÞÌáÉýÎó²î¡£¸ÃÎó²î±£´æÓÚHsmOsBlockPlaceholderAccessÀý³ÌÔÚ´¦Öóͷ£×¢²á±íÏÉèʱδ׼ȷʵÑé»á¼û¼ì²é£¬µ¼Ö¹¥»÷Õß¿ÉʹÓþºÌ¬Ìõ¼þʹÓÃÄÚºËÖеÄRtlOpenCurrentUserº¯Êý£¬Èƹý»á¼û¿ØÖÆ£¬½«Í¨Ë×Óû§È¨ÏÞÌáÉýÖÁSYSTEM£¬²¢Ïò.DEFAULTÓû§ÉèÖõ¥Î»Ð´Èëí§Òâ×¢²á±í¼üÖµ£¬´Ó¶øÍêÈ«¿ØÖÆÄ¿µÄÖ÷»ú¡£ËäÈ»MicrosoftÔøÓÚ2020ÄêÐû²¼²¹¶¡£¬µ«²¿·Ö°æ±¾²¹¶¡²»ÍêÕû»ò±»»Ø¹ö£¬×îÐÂWindows 11ϵͳÈԿɱ»Ê¹Ó᣹¥»÷Õß¿ÉÔÚÍâµØ´¥·¢Îó²î»ñȡϵͳ×î¸ßȨÏÞ¡£


¶þ¡¢Ó°Ïì¹æÄ£


Windows >= ËùÓÐÒÑÐû²¼°æ±¾


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


ÔÝÎÞ£¬ÇëÒ»Á¬¹Ø×¢Microsoft ¹Ù·½Ç徲ͨ¸æ£¬¾¡¿ìÓ¦ÓÃÕýʽÐû²¼µÄÀÛ»ýÇå¾²¸üлò²¹¶¡£¬È·±£ cldflt.sys Çý¶¯Îó²î»ñµÃÍêÕûÐÞ¸´¡£


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£


3.3 ͨÓý¨Òé


°´ÆÚ¸üÐÂϵͳ²¹¶¡£¬ïÔ̭ϵͳÎó²î£¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ¡£


ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬Ð޸ķÀ»ðǽսÂÔ£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ£¬ïÔÌ­½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ïÔÌ­¹¥»÷Ãæ¡£

ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£


ÔöǿϵͳÓû§ºÍȨÏÞ¹ÜÀí£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£

ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£


3.4 ²Î¿¼Á´½Ó


https://github.com/Nightmare-Eclipse/MiniPlasma/

https://nvd.nist.gov/vuln/detail/cve-2020-17103