AG公司云
【清静通告】微软宣布7月补丁修复124个清静问题
2020-07-15
综述
微软于周二宣布了7月清静更新补丁，修复了124个从简朴的诱骗攻击到远程代码执行的清静问题，产品涉及.NET Framework、Azure DevOps、Internet Explorer、Microsoft Edge、Microsoft Graphics Component、Microsoft JET Database Engine、Microsoft Malware Protection Engine、Microsoft Office、Microsoft Office SharePoint、Microsoft OneDrive、Microsoft Scripting Engine、Microsoft Windows、Open Source Software、Skype for Business、Visual Studio、Windows Hyper-V、Windows IIS、Windows Kernel、Windows Shell、Windows Subsystem for Linux、Windows Update Stack以及Windows WalletService。
Critical & Important误差概述
本次微软共修复了16个Critical级别误差，104 个 Important 级别误差，虽然本月宣布的误差暂未发明果真使用的情形，仍强烈建议所有用户尽快装置更新：
Windows DNS服务器远程代码执行误差SigRed（CVE-2020-1350）
本月修复的最严重误差是一个保存于Windows DNS 服务器中的可蠕虫化误差CVE-2020-1350（代号 SigRed）。
微软官方给出的评分为 10 分（CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C）。
未经身份验证的攻击者通过向受影响服务器发送全心结构的请求数据包来使用该误差，乐成的使用可实现在目的系统上执行恣意代码。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350
Hyper-V RemoteFX vGPU 远程代码执行误差（CVE-2020-1041， CVE-2020-1040，CVE-2020-1032， CVE-2020-1036，CVE-2020-1042， CVE-2020-1043）
由于宿主机（Host）上的Hyper-V RemoteFX vGPU无法准确验证客户机（Guest）上经由身份验证用户的输入，保存一个远程代码执行误差。使用此误差时，攻击者可以在客户机上运行经特殊设计的应用程序，从而攻击在Hyper-V宿主机上运行的某些第三方视频驱动程序，最终实现在宿主机操作系统上执行恣意代码。
官方未针对以上误差提供补丁程序，并就为什么禁用和删除RemoteFX而不修复误差举行了回复：
在2019年10月，微软宣布将阻止Remote FX的开发并建设新功效。关于Windows 10 1809及更高版本以及Windows Server 2019，不再支持RemoteFX vGPU。由于这些误差实质上是系统结构的问题，并且该功效已在较新版本的Windows中弃用，因此Microsoft确定禁用和删除RemoteFX是更好的做法。
更多详细信息参考官方通告：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1041
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1040
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1032
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1036
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1042
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1043
Microsoft Word（CVE-2020-1446，CVE-2020-1447，CVE-2020-1448）
由于Microsoft Word软件无法准确处置惩罚内存中的工具，保存一个远程代码执行误差。为了使用该误差，攻击者可能会通过种种方法诱导用户使用Microsoft Word软件翻开特制文件。
乐成使用此误差的攻击者可以在目今用户的上下文中执行操作。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1446
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1447
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1448
Microsoft Excel（CVE-2020-1240）
由于Microsoft Excel软件无法准确处置惩罚内存中的工具，保存一个远程代码执行误差。为了使用该误差，攻击者可能会通过种种方法诱导用户使用受影响的Microsoft Excel翻开特制文件。
乐成使用该误差的攻击者可以在目今用户的上下文中执行恣意代码。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1240
Microsoft Outlook（CVE-2020-1349）
Microsoft Outlook软件中保存一个远程代码执行误差。乐成使用此误差的攻击者可以使用特制文件在目今用户的上下文中执行操作。要使用此误差，攻击者会诱导用户使用受影响的Microsoft Outlook软件翻开特制文件。
注重，预览窗格是该误差的攻击前言。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1349
Windows LNK快捷方法文件（CVE-2020-1421）
Microsoft Windows中保存一个远程代码执行误差，攻击者可能向用户提供可移动驱动器或远程共享，其中包括恶意的.LNK文件和关联的恶意二进制文件。当用户在Windows资源治理器或任何其他剖析.LNK文件的应用程序中翻开此驱动器（或远程共享）时，恶意二进制文件将在目的系统上执行恣意代码。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1421
远程桌面客户端远程执行代码误差（CVE-2020-1374）
Windows远程桌面客户端中保存一个远程代码执行误差。乐成的使用可以使攻击者在毗连到恶意服务器的客户端盘算机上执行恣意代码。
为了使用此误差，攻击者会控制一台服务器，然后通过种种手段，好比社工、DNS 投毒等方法诱导用户去毗连恶意服务器。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1374
Microsoft Office 权限提升误差（CVE-2020-1025）
Microsoft SharePoint Server和Skype for Business Server由于未准确处置惩罚OAuth令牌验证，保存一个权限提升误差。乐成使用此误差的攻击者可以绕过身份验证并实现不正当会见。
要使用此误差，攻击者需要修改令牌。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1025
NET Framework，SharePoint Server和Visual Studio远程执行代码误差（CVE-2020-1147）
由于.NET Framework、Microsoft SharePoint和Visual Studio无法检查XML文件输入的源标记，保存一个远程代码执行误差。乐成使用此误差的攻击者可以在处置惩罚反序列化XML内容的历程上下文中执行恣意代码。
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147
本次更新归纳综合：
|
产品 |
CVE 编号 |
CVE 问题 |
严重水平 |
|
.NET Framework |
CVE-2020-1147 |
.NET Framework, SharePoint Server, and Visual Studio 远程代码执行误差 |
Critical |
|
Microsoft Graphics Component |
CVE-2020-1435 |
GDI+ 远程代码执行误差 |
Critical |
|
Microsoft Graphics Component |
CVE-2020-1436 |
Windows Font Library 远程代码执行误差 |
Critical |
|
Microsoft Office |
CVE-2020-1349 |
Microsoft Outlook 远程代码执行误差 |
Critical |
|
Microsoft Office |
CVE-2020-1439 |
PerformancePoint Services 远程代码执行误差 |
Critical |
|
Microsoft Windows |
CVE-2020-1350 |
Windows DNS Server 远程代码执行误差 |
Critical |
|
Microsoft Windows |
CVE-2020-1421 |
LNK 远程代码执行误差 |
Critical |
|
Microsoft Windows |
CVE-2020-1374 |
Remote Desktop Client 远程代码执行误差 |
Critical |
|
Microsoft Windows |
CVE-2020-1410 |
Windows Address Book 远程代码执行误差 |
Critical |
|
Skype for Business |
CVE-2020-1025 |
Microsoft Office 特权提升误差 |
Critical |
|
Windows Hyper-V |
CVE-2020-1032 |
Hyper-V RemoteFX vGPU 远程代码执行误差 |
Critical |
|
Windows Hyper-V |
CVE-2020-1036 |
Hyper-V RemoteFX vGPU 远程代码执行误差 |
Critical |
|
Windows Hyper-V |
CVE-2020-1040 |
Hyper-V RemoteFX vGPU 远程代码执行误差 |
Critical |
|
Windows Hyper-V |
CVE-2020-1041 |
Hyper-V RemoteFX vGPU 远程代码执行误差 |
Critical |
|
Windows Hyper-V |
CVE-2020-1043 |
Hyper-V RemoteFX vGPU 远程代码执行误差 |
Critical |
|
Windows Hyper-V |
CVE-2020-1042 |
Hyper-V RemoteFX vGPU 远程代码执行误差 |
Critical |
|
Azure DevOps |
CVE-2020-1326 |
Azure DevOps Server Cross-site Scripting Vulnerability |
Important |
|
Microsoft Graphics Component |
CVE-2020-1351 |
Microsoft Graphics Component 信息泄露误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1355 |
Windows Font Driver Host 远程代码执行误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1381 |
Windows Graphics Component 特权提升误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1382 |
Windows Graphics Component 特权提升误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1397 |
Windows Imaging Component 信息泄露误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1408 |
Microsoft Graphics 远程代码执行误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1409 |
DirectWrite 远程代码执行误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1412 |
Microsoft Graphics Components 远程代码执行误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1468 |
Windows GDI 信息泄露误差 |
Important |
|
Microsoft JET Database Engine |
CVE-2020-1400 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Microsoft JET Database Engine |
CVE-2020-1401 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Microsoft JET Database Engine |
CVE-2020-1407 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Microsoft Malware Protection Engine |
CVE-2020-1461 |
Microsoft Defender 特权提升误差 |
Important |
|
Microsoft Office |
CVE-2020-1442 |
Office Web Apps XSS Vulnerability |
Important |
|
Microsoft Office |
CVE-2020-1445 |
Microsoft Office 信息泄露误差 |
Important |
|
Microsoft Office |
CVE-2020-1446 |
Microsoft Word 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1447 |
Microsoft Word 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1448 |
Microsoft Word 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1449 |
Microsoft Project 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1458 |
Microsoft Office 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-1240 |
Microsoft Excel 远程代码执行误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1342 |
Microsoft Office 信息泄露误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1456 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1443 |
Microsoft SharePoint 诱骗误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1444 |
Microsoft SharePoint 远程代码执行误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1450 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1451 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1454 |
Microsoft SharePoint Reflective XSS Vulnerability |
Important |
|
Microsoft OneDrive |
CVE-2020-1465 |
Microsoft OneDrive 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1418 |
Windows Diagnostics Hub 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1420 |
Windows Error Reporting 信息泄露误差 |
Important |
|
Microsoft Windows |
CVE-2020-1422 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1347 |
Windows Storage Services 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1352 |
Windows USO Core Worker 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1353 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1354 |
Windows UPnP Device Host 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1356 |
Windows iSCSI Target Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1359 |
Windows CNG Key Isolation Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1363 |
Windows Picker Platform 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1365 |
Windows Event Logging Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1366 |
Windows Print Workflow Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1370 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1371 |
Windows Event Logging Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1372 |
Windows Mobile Device Management Diagnostics 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1373 |
Windows Network Connections Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1375 |
Windows COM Server 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1384 |
Windows CNG Key Isolation Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1385 |
Windows Credential Picker 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1386 |
Connected User Experiences and Telemetry Service 信息泄露误差 |
Important |
|
Microsoft Windows |
CVE-2020-1387 |
Windows Push Notification Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1390 |
Windows Network Connections Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1391 |
Windows Agent Activation Runtime 信息泄露误差 |
Important |
|
Microsoft Windows |
CVE-2020-1393 |
Windows Diagnostics Hub 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1394 |
Windows 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1395 |
Windows 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1398 |
Windows Lockscreen 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1399 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1402 |
Windows ActiveX Installer Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1404 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1405 |
Windows Mobile Device Management Diagnostics 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1406 |
Windows Network List Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1413 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1427 |
Windows Network Connections Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1428 |
Windows Network Connections Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1429 |
Windows Error Reporting Manager 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1430 |
Windows UPnP Device Host 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1431 |
Windows AppX Deployment Extensions 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1434 |
Windows Sync Host Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1437 |
Windows Network Location Awareness Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1438 |
Windows Network Connections Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1463 |
Windows SharedStream Library 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1249 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1267 |
Local Security Authority Subsystem Service 拒绝服务误差 |
Important |
|
Microsoft Windows |
CVE-2020-1333 |
Group Policy Services Policy Processing 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1085 |
Windows Function Discovery Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1330 |
Windows Mobile Device Management Diagnostics 信息泄露误差 |
Important |
|
Open Source Software |
CVE-2020-1469 |
Bond 拒绝服务误差 |
Important |
|
Visual Studio |
CVE-2020-1416 |
Visual Studio and Visual Studio Code 特权提升误差 |
Important |
|
Visual Studio |
CVE-2020-1481 |
Visual Studio Code ESLint Extention 远程代码执行误差 |
Important |
|
Windows IIS |
ADV200008 |
Microsoft Guidance for Enabling Request Smuggling Filter on IIS Servers |
Important |
|
Windows Kernel |
CVE-2020-1336 |
Windows Kernel 特权提升误差 |
Important |
|
Windows Kernel |
CVE-2020-1419 |
Windows Kernel 信息泄露误差 |
Important |
|
Windows Kernel |
CVE-2020-1357 |
Windows System Events Broker 特权提升误差 |
Important |
|
Windows Kernel |
CVE-2020-1358 |
Windows Resource Policy 信息泄露误差 |
Important |
|
Windows Kernel |
CVE-2020-1367 |
Windows Kernel 信息泄露误差 |
Important |
|
Windows Kernel |
CVE-2020-1388 |
Windows 特权提升误差 |
Important |
|
Windows Kernel |
CVE-2020-1389 |
Windows Kernel 信息泄露误差 |
Important |
|
Windows Kernel |
CVE-2020-1396 |
Windows ALPC 特权提升误差 |
Important |
|
Windows Kernel |
CVE-2020-1411 |
Windows Kernel 特权提升误差 |
Important |
|
Windows Kernel |
CVE-2020-1426 |
Windows Kernel 信息泄露误差 |
Important |
|
Windows Shell |
CVE-2020-1360 |
Windows Profile Service 特权提升误差 |
Important |
|
Windows Shell |
CVE-2020-1368 |
Windows Credential Enrollment Manager Service 特权提升误差 |
Important |
|
Windows Shell |
CVE-2020-1414 |
Windows Runtime 特权提升误差 |
Important |
|
Windows Shell |
CVE-2020-1415 |
Windows Runtime 特权提升误差 |
Important |
|
Windows Subsystem for Linux |
CVE-2020-1423 |
Windows Subsystem for Linux 特权提升误差 |
Important |
|
Windows Update Stack |
CVE-2020-1424 |
Windows Update Stack 特权提升误差 |
Important |
|
Windows Update Stack |
CVE-2020-1346 |
Windows Modules Installer 特权提升误差 |
Important |
|
Windows Update Stack |
CVE-2020-1392 |
Windows 特权提升误差 |
Important |
|
Windows WalletService |
CVE-2020-1344 |
Windows WalletService 特权提升误差 |
Important |
|
Windows WalletService |
CVE-2020-1361 |
Windows WalletService 信息泄露误差 |
Important |
|
Windows WalletService |
CVE-2020-1362 |
Windows WalletService 特权提升误差 |
Important |
|
Windows WalletService |
CVE-2020-1364 |
Windows WalletService 拒绝服务误差 |
Important |
|
Windows WalletService |
CVE-2020-1369 |
Windows WalletService 特权提升误差 |
Important |
|
Internet Explorer |
CVE-2020-1432 |
Skype for Business via Internet Explorer 信息泄露误差 |
Low |
|
Microsoft Edge |
CVE-2020-1433 |
Microsoft Edge PDF 信息泄露误差 |
Low |
|
Microsoft Edge |
CVE-2020-1462 |
Skype for Business via Microsoft Edge (EdgeHTML-based) 信息泄露误差 |
Low |
|
Microsoft Scripting Engine |
CVE-2020-1403 |
VBScript 远程代码执行误差 |
Moderate |
修复建议
微软官方已经宣布更新补丁，请实时举行补丁更新。
