微软多个清静误差通告
宣布时间 2020-08-120x00 误差概述
微软于周二宣布了8月清静更新补�。。。。。� ，，，修复了包括2个0day在内的120个误差， ，，，涉及Internet Explorer（IE）、Office、Microsoft Edge、Windows Media等众多组件和软件。。。。。值得注重的是， ，，，Windows诱骗误差（CVE-2020-1464）和IE剧本引擎内存破损误差（CVE-2020-1380）已被检测到在野使用， ，，，别的尚有四个远程代码执行误差（CVE-2020-1585、CVE-2020-1568、CVE-2020-1567、CVE-2020-1570）和三个权限提升误差（CVE-2020-1472、CVE-2020-1480、CVE-2020-1529）， ，，，需要重点关注， ，，，详见表格：
|
产品 |
CVE ID |
类 型 |
误差品级 |
远程使用 |
|
Windows |
CVE-2020-1464 |
Spoofing |
高危 |
是 |
|
Internet Explorer |
CVE-2020-1380 |
RCE |
严重 |
是 |
|
Windows |
CVE-2020-1472 |
EOP |
严重 |
否 |
|
Windows |
CVE-2020-1585 |
RCE |
严重 |
是 |
|
Microsoft Edge |
CVE-2020-1568 |
RCE |
严重 |
是 |
|
Internet Explorer |
CVE-2020-1567 |
RCE |
严重 |
是 |
|
Internet Explorer |
CVE-2020-1570 |
RCE |
严重 |
是 |
|
Windows |
CVE-2020-1480 |
EOP |
高危 |
否 |
|
Windows |
CVE-2020-1529 |
EOP |
高危 |
否 |
0x01 误差详情
Windows诱骗误差（CVE-2020-1464）
Windows在验证署名时， ，，，保存一个诱骗误差。。。。。乐成使用此误差的攻击者可绕过清静特征， ，，，从而加载过失署名的文件。。。。。
IE剧本引擎内存损坏误差（CVE-2020-1380）
IE剧本引擎在处置惩罚内存中的工具时， ，，，保存一个远程代码执行误差。。。。。攻击者可通过诱导用户会见特制网站或通过诱导用户翻开嵌入标记为“初始化清静”的ActiveX控件的应用程序或Microsoft Office文档等方法来使用此误差， ，，，别的， ，，，攻击者还可以通过攻击懦弱网站、向内容或广告效劳提供商添加特制内容来使用此误差， ，，，该误差导致可以在目今用户的上下文中执行恣意代码的方法损坏内存。。。。。
NetLogon权限提升误差（CVE-2020-1472）
NetLogon中保存一个权限提升误差。。。。。未经身份认证的攻击者可通过使用Netlogon远程协议（MS-NRPC）毗连域控制器来使用此误差。。。。。乐成使用此误差的攻击者可获得域治理员会见权限。。。。。
Windows编码解码库远程代码执行误差（CVE-2020-1585）
当 Microsoft Windows Codecs 库处置惩罚内存中的工具时， ，，，保存远程执行代码误差。。。。。乐成使用此误差的攻击者可以控制受影响的系统。。。。。
Microsoft Edge PDF远程执行代码误差（CVE-2020-1568）
Microsoft Edge PDF 阅读器在处置惩罚内存中的工具时， ，，，保存远程执行代码误差。。。。。远程攻击者通过结构包括恶意内容的PDF页面， ，，，并诱使用户使用Edge浏览器翻开， ，，，乐成使用此误差的攻击者可在受影响的系统上以相同的用户权限执行恣意代码。。。。。
MSHTML引擎远程执行代码误差（CVE-2020-1567）
该误差保存于MSHTML中的VBScript中， ，，，由于对VBScript的一个回调会删除工具， ，，，而对该块空间的引用仍然保保存客栈中， ，，，若是挪用该引用， ，，，则会触发UAF， ，，，最终可以造成远程代码执行。。。。。
IE剧本引擎内存损坏误差（CVE-2020-1570）
该误差源于javascript未初始化客栈内存， ，，，var工具通过GetValue来举行初始化， ，，，若是第二个参数为工具， ，，，则GetValue只初始化第三个参数值， ，，，造成第二个参数未初始化， ，，，最终导致远程代码执行。。。。。
Windows GDI 权限提升误差（CVE-2020-1480/CVE-2020-1529）
Windows 图形装备接口 (GDI) 处置惩罚内存中的工具的方法中保存特权提升误差。。。。。乐成使用此误差的攻击者可以在内核模式下执行恣意代码。。。。。
0x02 影响规模
|
误差编号 |
受影响产品版本 |
|
CVE-2020-1464 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1380 |
Internet Explorer 11 |
|
CVE-2020-1472 |
Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1585 |
Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems |
|
CVE-2020-1568 |
Microsoft Edge (EdgeHTML-based) |
|
CVE-2020-1567 CVE-2020-1570 |
Internet Explorer 11 Internet Explorer 9 |
|
CVE-2020-1480 |
Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
|
CVE-2020-1529 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
0x03 处置惩罚建议
微软官方已经宣布补�。。。。。� ，，，下载链接：
https://portal.msrc.microsoft.com/en-us/security-guidance
0x04 相关新闻
https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2020-patch-tuesday-fixes-2-zero-days-120-flaws/
0x05 参考链接
https://portal.msrc.microsoft.com/en-us/security-guidance
0x06 时间线
2020-08-11 微软官方宣布误差
2020-08-12 VSRC宣布误差通告
京公网安备11010802024551号