微软多个安全缝隙公告
颁布功夫 2020-08-120x00 缝隙概述
微软于周二颁布了8月安全更新补丁，建复了蕴含2个0day在内的120个缝隙，涉及Internet Explorer（IE）、Office、Microsoft Edge、Windows Media等多多组件和软件 。值妥贴心的是，Windows糊弄缝隙（CVE-2020-1464）和IE剧本引擎内存粉碎缝隙（CVE-2020-1380）已被检测到在野利用，此表还有四个远程代码执行缝隙（CVE-2020-1585、CVE-2020-1568、CVE-2020-1567、CVE-2020-1570）和三个权限提升缝隙（CVE-2020-1472、CVE-2020-1480、CVE-2020-1529），必要沉点关注，详见表格：
|
产品 |
CVE ID |
类 型 |
缝隙等级 |
远程利用 |
|
Windows |
CVE-2020-1464 |
Spoofing |
高危 |
是 |
|
Internet Explorer |
CVE-2020-1380 |
RCE |
严沉 |
是 |
|
Windows |
CVE-2020-1472 |
EOP |
严沉 |
否 |
|
Windows |
CVE-2020-1585 |
RCE |
严沉 |
是 |
|
Microsoft Edge |
CVE-2020-1568 |
RCE |
严沉 |
是 |
|
Internet Explorer |
CVE-2020-1567 |
RCE |
严沉 |
是 |
|
Internet Explorer |
CVE-2020-1570 |
RCE |
严沉 |
是 |
|
Windows |
CVE-2020-1480 |
EOP |
高危 |
否 |
|
Windows |
CVE-2020-1529 |
EOP |
高危 |
否 |
0x01 缝隙详情
Windows糊弄缝隙（CVE-2020-1464）
Windows在验证署名时，存在一个糊弄缝隙 。成功利用此缝隙的攻击者可绕过安全个性，从而加载谬误署名的文件 。
IE剧本引擎内存败坏缝隙（CVE-2020-1380）
IE剧本引擎在处置内存中的对象时，存在一个远程代码执行缝隙 。攻击者可通过诱导用户接见特造网站或通过诱导用户打开嵌入象征为“初始化安全”的ActiveX控件的利用法式或Microsoft Office文档等方式来利用此缝隙，此表，攻击者还能够通过攻击脆弱网站、向内容或告白服务提供商增长特造内容来利用此缝隙，该缝隙导致能够在当前用户的高低文中执行肆意代码的方式败坏内存 。
NetLogon权限提升缝隙（CVE-2020-1472）
NetLogon中存在一个权限提升缝隙 。未经身份认证的攻击者可通过使用Netlogon远程和谈（MS-NRPC）衔接域节造器来利用此缝隙 。成功利用此缝隙的攻击者可获得域治理员接见权限 。
Windows编码解码库远程代码执行缝隙（CVE-2020-1585）
当 Microsoft Windows Codecs 库处置内存中的对象时，存在远程执行代码缝隙 。成功利用此缝隙的攻击者能够节造受影响的系统 。
Microsoft Edge PDF远程执行代码缝隙（CVE-2020-1568）
Microsoft Edge PDF 阅读器在处置内存中的对象时，存在远程执行代码缝隙 。远程攻击者通过机关蕴含恶意内容的PDF页面，并诱使用户使用Edge浏览器打开，成功利用此缝隙的攻击者可在受影响的系统上以一样的用户权限执行肆意代码 。
MSHTML引擎远程执行代码缝隙（CVE-2020-1567）
该缝隙存在于MSHTML中的VBScript中，由于对VBScript的一个回调会删除对象，而对该块空间的引用依然保留在仓库中，若是挪用该引用，则会触发UAF，最终能够造成远程代码执行 。
IE剧本引擎内存败坏缝隙（CVE-2020-1570）
该缝隙源于javascript未初始化仓库内存，var对象通过GetValue来进行初始化，若是第二个参数为对象，则GetValue只初始化第三个参数值，造成第二个参数未初始化，最终导致远程代码执行 。
Windows GDI 权限提升缝隙（CVE-2020-1480/CVE-2020-1529）
Windows 图形设备接口 (GDI) 处置内存中的对象的方式中存在特权提升缝隙 。成功利用此缝隙的攻击者能够在内核模式下执行肆意代码 。
0x02 影响领域
|
缝隙编号 |
受影响产品版本 |
|
CVE-2020-1464 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1380 |
Internet Explorer 11 |
|
CVE-2020-1472 |
Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1585 |
Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems |
|
CVE-2020-1568 |
Microsoft Edge (EdgeHTML-based) |
|
CVE-2020-1567 CVE-2020-1570 |
Internet Explorer 11 Internet Explorer 9 |
|
CVE-2020-1480 |
Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1529 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
0x03 措置建议
微软官方已经颁布补丁，下载链接：
https://portal.msrc.microsoft.com/en-us/security-guidance
0x04 有关新闻
https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2020-patch-tuesday-fixes-2-zero-days-120-flaws/
0x05 参考链接
https://portal.msrc.microsoft.com/en-us/security-guidance
0x06 功夫线
2020-08-11 微软官方颁布缝隙
2020-08-12 VSRC颁布缝隙公告
京公网安备11010802024551号