AG公司云
【误差通告】微软5月清静更新多个产品高危误差通告
2020-05-14
一. 误差概述
北京时间5月13日，微软宣布5月清静更新补丁，修复了111个清静问题，涉及Microsoft Windows、Internet Explorer、Microsoft Edge、.NET Framework、Microsoft Office、Visual Studio等普遍使用的产品，其中包括特权提升和远程代码执行等高危误差类型。
本月微软月度更新修复的误差中，严重水平为要害（Critical）的误差共有16个，主要（Important）误差有95个。其中Win32k 特权提升（CVE-2020-1054）误差PoC的已果真，请相关用户实时更新补丁举行防护，详细误差列表请参考附录。
参考链接：
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-May
二. 重点误差简述
凭证产品盛行度和误差主要性筛选出此次更新中包括影响较大的误差，请相关用户重点举行关注：
CVE-2020-1054（PoC已果真）/CVE-2020-1143：Win32k 特权提升误差
由于Windows kernel-mode driver未能准确处置惩罚内存中的工具，导致保存两个特权提升误差。攻击者可通过登录目的系统并运行特制的应用程序来举行使用，乐成使用此误差的攻击者可以在系统内核模式中执行恣意代码。
官方通告链接：
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1054
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1143
CVE-2020-1067：Windows 远程执行代码误差
Windows 在处置惩罚内存工具的历程中保存远程执行代码误差。具有域用户帐户的攻击者通过发送特殊的请求，从而使 Windows 执行提升权限的恣意代码。乐成使用此误差可以在受影响的Windows上以更高的权限执行恣意代码。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1067
CVE-2020-1153：Microsoft 图形组件远程代码执行误差
Microsoft Graphics Components在处置惩罚内存工具的历程中保存远程代码执行误差。攻击者可通过诱导用户翻开特制文件来使用此误差，乐成使用此误差的攻击者可在目的系统上执行恣意代码。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1153
CVE-2020-1062：Internet Explorer 内存损坏误差
当 Internet Explorer 不准确地会见内存中的工具时，保存远程执行代码误差。该误差可能以一种攻击者可以在目今用户的上下文中执行恣意代码的方法损坏内存。乐成使用该误差的攻击者可以获得与目今用户相同的用户权限。当用户会见一个特殊设计的、由攻击者控制的web页面时，可能会触发此误差。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1062
CVE-2020-1023、CVE-2020-1024、CVE-2020–1102和CVE-2020-1069：Microsoft SharePoint 远程执行代码误差
以上4个为微软SharePoint中的远程代码执行误差。攻击者可以使用此类误差获得在受影响终端或服务器上执行恣意代码的能力。由于SharePoint无法检查应用程序包的源标记，前3个误差可以诱导用户翻开一个特殊制作的SharePoint应用程序文件从而举行使用。由于SharePoint Server无法准确识别和筛选不清静的 ASP.NET Web 控件，经由身份验证的攻击者通过上传一个特殊制作的页面到SharePoint服务器，可乐成使用CVE-2020-1069误差。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1023
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1024
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1102
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1069
CVE-2020-0901：Microsoft Excel 远程执行代码误差
由于Microsoft Excel无法准确处置惩罚内存中的工具，导致保存远程执行代码误差。攻击者通过诱使用户使用受影响版本的Microsoft Excel翻开经由特殊设计的文件举行使用。乐成使用此误差的攻击者可以获得与目今用户相同的系统控制权限。
官方通告链接：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0901
三. 影响规模
以下为重点关注误差的受影响产品版本，其他误差影响产品规模请参阅官方通告链接。
|
误差编号 |
受影响产品版本 |
|
CVE-2020-1054 CVE-2020-1143 CVE-2020-1067 CVE-2020-1153 |
Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1803 (Server Core Installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) |
|
CVE-2020-1062 |
Internet Explorer 11： Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2012 Windows Server 2012 R2 |
|
Internet Explorer 9： Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 |
|
|
CVE-2020-1023 CVE-2020-1024 CVE-2020-1069 |
Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2019 |
|
CVE-2020–1102 |
Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server 2019 |
|
CVE-2020-0901 |
Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Excel 2010 Service Pack 2 (32-bit editions) Microsoft Excel 2010 Service Pack 2 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Office 2016 for Mac Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for Mac |
四. 误差防护
4.1 补丁更新
现在微软官方已针对受支持的产品版本宣布了修复以上误差的清静补丁，强烈建议受影响用户尽快装置补丁举行防护，官方下载链接：
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-May
注：由于网络问题、盘算机情形问题等缘故原由，Windows Update的补丁更新可能泛起失败。用户在装置补丁后，应实时检查补丁是否乐成更新。
右键点击Windows图标，选择“设置(N)”，选择“更新和清静”-“Windows更新”，审查该页面上的提醒信息，也可点击“审查更新历史纪录”审查历史更新情形。
针对未乐成装置的更新，可点击更新名称跳转到微软官方下载页面，建议用户点击该页面上的链接，转到“Microsoft更新目录”网站下载自力程序包并装置。
附录：误差列表
|
影响产品 |
CVE 编号 |
误差问题 |
严重水平 |
|
Microsoft Graphics Component |
CVE-2020-1117 |
Microsoft Color Management 远程代码执行误差 |
Critical |
|
Microsoft Graphics Component |
CVE-2020-1153 |
Microsoft Graphics Components 远程代码执行误差 |
Critical |
|
Microsoft Office SharePoint |
CVE-2020-1023 |
Microsoft SharePoint 远程代码执行误差 |
Critical |
|
Microsoft Office SharePoint |
CVE-2020-1024 |
Microsoft SharePoint 远程代码执行误差 |
Critical |
|
Microsoft Scripting Engine |
CVE-2020-1037 |
Chakra Scripting Engine 内存破损误差 |
Critical |
|
Microsoft Office SharePoint |
CVE-2020-1069 |
Microsoft SharePoint Server 远程代码执行误差 |
Critical |
|
Microsoft Office SharePoint |
CVE-2020-1102 |
Microsoft SharePoint 远程代码执行误差 |
Critical |
|
Microsoft Scripting Engine |
CVE-2020-1065 |
Scripting Engine 内存破损误差 |
Critical |
|
Microsoft Windows |
CVE-2020-1028 |
Media Foundation 内存破损误差 |
Critical |
|
Microsoft Windows |
CVE-2020-1126 |
Media Foundation 内存破损误差 |
Critical |
|
Microsoft Windows |
CVE-2020-1136 |
Media Foundation 内存破损误差 |
Critical |
|
Visual Studio |
CVE-2020-1192 |
Visual Studio Code Python Extension 远程代码执行误差 |
Critical |
|
Internet Explorer |
CVE-2020-1064 |
MSHTML Engine 远程代码执行误差 |
Critical |
|
Internet Explorer |
CVE-2020-1093 |
VBScript 远程代码执行误差 |
Critical |
|
Microsoft Edge |
CVE-2020-1056 |
Microsoft Edge 特权提升误差 |
Critical |
|
Internet Explorer |
CVE-2020-1062 |
Internet Explorer 内存破损误差 |
Critical |
|
.NET Core |
CVE-2020-1108 |
.NET Core & .NET Framework 拒绝服务误差 |
Important |
|
.NET Core |
CVE-2020-1161 |
ASP.NET Core 拒绝服务误差 |
Important |
|
.NET Framework |
CVE-2020-1066 |
.NET Framework 特权提升误差 |
Important |
|
Active Directory |
CVE-2020-1055 |
Microsoft Active Directory Federation Services 跨站剧本误差 |
Important |
|
Common Log File System Driver |
CVE-2020-1154 |
Windows Common Log File System Driver 特权提升误差 |
Important |
|
Microsoft Dynamics |
CVE-2020-1063 |
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability |
Important |
|
Microsoft Edge |
CVE-2020-1059 |
Microsoft Edge 诱骗误差 |
Important |
|
Microsoft Edge |
CVE-2020-1096 |
Microsoft Edge PDF 远程代码执行误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-0963 |
Windows GDI 信息泄露误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1054 |
Win32k 特权提升误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1135 |
Windows Graphics Component 特权提升误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1140 |
DirectX 特权提升误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1179 |
Windows GDI 信息泄露误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1141 |
Windows GDI 信息泄露误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1142 |
Windows GDI 特权提升误差 |
Important |
|
Microsoft Graphics Component |
CVE-2020-1145 |
Windows GDI 信息泄露误差 |
Important |
|
Microsoft JET Database Engine |
CVE-2020-1175 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Microsoft JET Database Engine |
CVE-2020-1051 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Microsoft JET Database Engine |
CVE-2020-1174 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Microsoft JET Database Engine |
CVE-2020-1176 |
Jet Database Engine 远程代码执行误差 |
Important |
|
Microsoft Office |
CVE-2020-0901 |
Microsoft Excel 远程代码执行误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1099 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1101 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1107 |
Microsoft SharePoint 诱骗误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1100 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1103 |
Microsoft SharePoint 信息泄露误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1104 |
Microsoft SharePoint 诱骗误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1105 |
Microsoft SharePoint 诱骗误差 |
Important |
|
Microsoft Office SharePoint |
CVE-2020-1106 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Windows |
CVE-2020-1021 |
Windows Error Reporting 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1010 |
Microsoft Windows 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1048 |
Windows Print Spooler 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1071 |
Windows Remote Access Common Dialog 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1076 |
Windows 拒绝服务误差 |
Important |
|
Microsoft Windows |
CVE-2020-1078 |
Windows Installer 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1084 |
Connected User Experiences and Telemetry Service 拒绝服务误差 |
Important |
|
Microsoft Windows |
CVE-2020-1116 |
Windows CSRSS 信息泄露误差 |
Important |
|
Microsoft Windows |
CVE-2020-1118 |
Microsoft Windows Transport Layer Security 拒绝服务误差 |
Important |
|
Microsoft Windows |
CVE-2020-1124 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1134 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1137 |
Windows Push Notification Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1138 |
Windows Storage Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1143 |
Win32k 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1144 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1149 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1150 |
Media Foundation 内存破损误差 |
Important |
|
Microsoft Windows |
CVE-2020-1151 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1155 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1156 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1157 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1158 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1186 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1189 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1190 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1067 |
Windows 远程代码执行误差 |
Important |
|
Microsoft Windows |
CVE-2020-1068 |
Microsoft Windows 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1070 |
Windows Print Spooler 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1072 |
Windows Kernel 信息泄露误差 |
Important |
|
Microsoft Windows |
CVE-2020-1077 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1079 |
Microsoft Windows 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1081 |
Windows Printer Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1082 |
Windows Error Reporting 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1086 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1088 |
Windows Error Reporting 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1090 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1111 |
Windows Clipboard Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1112 |
Windows Background Intelligent Transfer Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1121 |
Windows Clipboard Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1123 |
Connected User Experiences and Telemetry Service 拒绝服务误差 |
Important |
|
Microsoft Windows |
CVE-2020-1125 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1131 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1132 |
Windows Error Reporting Manager 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1139 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1164 |
Windows Runtime 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1165 |
Windows Clipboard Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1166 |
Windows Clipboard Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1184 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1185 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1187 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1188 |
Windows State Repository Service 特权提升误差 |
Important |
|
Microsoft Windows |
CVE-2020-1191 |
Windows State Repository Service 特权提升误差 |
Important |
|
Power BI |
CVE-2020-1173 |
Microsoft Power BI Report Server 诱骗误差 |
Important |
|
Visual Studio |
CVE-2020-1171 |
Visual Studio Code Python Extension 远程代码执行误差 |
Important |
|
Windows Hyper-V |
CVE-2020-0909 |
Windows Hyper-V 拒绝服务误差 |
Important |
|
Windows Kernel |
CVE-2020-1114 |
Windows Kernel 特权提升误差 |
Important |
|
Windows Kernel |
CVE-2020-1087 |
Windows Kernel 特权提升误差 |
Important |
|
Windows Scripting |
CVE-2020-1061 |
Microsoft Script Runtime 远程代码执行误差 |
Important |
|
Windows Subsystem for Linux |
CVE-2020-1075 |
Windows Subsystem for Linux 信息泄露误差 |
Important |
|
Windows Task Scheduler |
CVE-2020-1113 |
Windows Task Scheduler 清静功效绕过误差 |
Important |
|
Windows Update Stack |
CVE-2020-1110 |
Windows Update Stack 特权提升误差 |
Important |
|
Windows Update Stack |
CVE-2020-1109 |
Windows Update Stack 特权提升误差 |
Important |
|
Internet Explorer |
CVE-2020-1092 |
Internet Explorer 内存破损误差 |
Important |
|
Microsoft Scripting Engine |
CVE-2020-1035 |
VBScript 远程代码执行误差 |
Important |
|
Microsoft Scripting Engine |
CVE-2020-1058 |
VBScript 远程代码执行误差 |
Important |
|
Microsoft Scripting Engine |
CVE-2020-1060 |
VBScript 远程代码执行误差 |
Important |
声明
本清静通告仅用来形貌可能保存的清静问题，AG公司科技不为此清静通告提供任何包管或允许。由于撒播、使用此清静通告所提供的信息而造成的任何直接或者间接的效果及损失，均由使用者自己认真，AG公司科技以及清静通告作者不为此肩负任何责任。
AG公司科技拥有对此清静通告的修改息争释权。如欲转载或撒播此清静通告，必需包管此清静通告的完整性，包括版权声明等所有内容。未经AG公司科技允许，不得恣意修改或者增减此清静通告内容，不得以任何方法将其用于商业目的。
关于AG公司科技
AG公司（简称AG公司科技）建设于2000年4月，总部位于北京。在海内外设有30多个分支机构，为政府、运营商、金融、能源、互联网以及教育、医疗等行业用户，提供具有焦点竞争力的清静产品及解决计划，资助客户实现营业的清静顺畅运行。
基于多年的清静攻防研究，AG公司科技在网络及终端清静、互联网基础清静、合规及清静治理等领域，为客户提供入侵检测/防护、抗拒绝服务攻击、远程清静评估以及Web清静防护等产品以及专业清静服务。
AG公司于2014年1月29日起在深圳证券生意所创业板上市，股票简称：AG公司科技，股票代码：300369。
