微软 | 9月多个产品缝隙公告
颁布功夫 2020-09-090x00 缝隙概述
2020年09月08日星期二，Microsoft颁布了9月的安全更新。本次安全更新共建复了129个缝隙，涉及Microsoft Windows、Internet Explorer、Microsoft Office、Microsoft Exchange Serve等，目前尚没有一个缝隙被在野利用。其中有23个缝隙为严沉缝隙，105个为高危缝隙。
0x01 缝隙详情
2020年9月安全更新涉及以下组件：
lMicrosoft Windows
lMicrosoft Edge (EdgeHTML-based)
lMicrosoft Edge (Chromium-based)
lMicrosoft ChakraCore
lnternet Explorer
lSQL Server
lMicrosoft JET Database Engine
lMicrosoft Office and Microsoft Office Services and Web Apps
lMicrosoft Dynamics
lVisual Studio
lMicrosoft Exchange Server
lSQL Server
lASP.NET
lMicrosoft OneDrive
lAzure DevOps
部门受影响的版本如下：
CVE编号 | 影响版本 |
CVE-2020-0664 | Windows Server 2008 for 32-bit SystemsService Pack 2 Windows Server 2008 for 32-bit SystemsService Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation)
|
CVE-2020-0922 CVE-2020-1252 CVE-2020-1285 | Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-basedSystems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-basedSystems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
CVE-2020-1129 | Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
CVE-2020-1200 | Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 Service Pack 2 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2019 |
CVE-2020-1210 | Microsoft Business Productivity Servers 2010 Service Pack 2 Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server 2010 Service Pack 2 Microsoft SharePoint Server 2019 |
CVE-2020-1319 | Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windows 10 Version 1803 for 32-bit Systems Windows 10 Version 1803 for ARM64-based Systems Windows 10 Version 1803 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 2004 for ARM64-based Systems Windows 10 Version 2004 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows Server, version 2004 (Server Core installation) |
CVE-2020-1452 CVE-2020-1453 CVE-2020-1460 | Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 Service Pack 2 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2019 |
CVE-2020-1576 | Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 Service Pack 2 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2010 Service Pack 2 Microsoft SharePoint Server 2019 |
CVE-2020-1595 | Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2019 |
部门缝隙详情：
1.Microsoft COM 远程代码执行缝隙（CVE-2020-0922）
Windows的Microsoft COM处置内存对象的方式中存在一个远程代码执行缝隙。
攻击者引诱用户接见一个带有恶意JavaScript的网站可利用此缝隙，成功利用此缝隙的攻击者能够在指标系统上执行肆意代码。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0922
2.Microsoft SharePoint远程代码执行多个安全缝隙
当软件无法查抄利用法式包的源象征时，Microsoft SharePoint中将存在一个远程代码执行缝隙。
攻击者必要上传一个恶意的SharePoint利用法式包到受影响的SharePoint版正本利用此缝隙，成功利用此缝隙的攻击者能够在SharePoint利用法式池和SharePoint服务器帐户中运行肆意代码。
本次Microsoft建复了Sharepoint 2010年至2019年版本中的7个其他严沉缝隙。别离为：CVE-2020-1200、CVE-2020-1210、CVE-2020-1452、CVE-2020-1453、CVE-2020-1576、CVE-2020-1460和CVE-2020-1595。
1.CVE-2020-1200
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1200
2.CVE-2020-1210
CVE-2020-1210是受支持版本的Microsoft Sharepoint文档治理软件中的远程代码执行缝隙。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1210
3.CVE-2020-1452
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1452
4.CVE-2020-1453
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1453
5.CVE-2020-1460
当Microsoft SharePoint Server无法正确鉴别和过滤不安全的ASP.Net Web控件时，它会存在一个远程代码执行缝隙。
攻击者通过在受影响的Microsoft SharePoint Server版本上创建并挪用特造页面来利用此缝隙，成功利用此缝隙并经过身份验证的攻击者能够使用特造页面在SharePoint利用法式池过程安全方面执行操作。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1460
6.CVE-2020-1576
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1576
7.CVE-2020-1595
Microsoft SharePoint中存在一个远程代码执行缝隙，由于没有防护战术来使API免受不安全数据输入的攻击。攻击者通过在受影响的SharePoint版本上使用特殊体式的输入接见易受习染的API来利用此缝隙。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1595
3.Microsoft Windows Codecs 库远程代码执行缝隙（CVE-2020-1319）
Microsoft Windows Codecs 库处置内存中的对象时，存在一处远程代码执行缝隙。
成功利用此缝隙的攻击者能够节造受影响的系统，如装置法式、查看、更改或删除数据，或创建拥有齐全用户权限的新帐户。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1319
4.Dynamics 365（on-premises）远程代码执行缝隙
1. Microsoft Dynamics 365 for Finance and Operations（on-premises）远程代码执行缝隙（CVE-2020-16857）
Microsoft Dynamics 365 for Finance and Operations（on-premises）版本10.0.11中存在一个远程代码执行缝隙。经过身份验证的、拥有导入和导出数据特权的攻击者能够通过将恶意文件发送到易受攻击的Dynamics服务器来利用此缝隙，成功利用此缝隙的攻击者能够通过在受害者服务器上执行服务器端脚正本实现远程代码执行。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16857
2. Microsoft Dynamics 365（on-premises）远程代码执行缝隙（CVE-2020-16862）
当服务器无法正确对待受影响的Dynamics服务器的Web要求时，Microsoft Dynamics 365（on-premises）中将存在一个远程代码执行缝隙。经过身份验证的攻击者能够通过将恶意要求发送到易受攻击的Dynamics服务器来利用此缝隙，成功利用此缝隙的攻击者能够在SQL服务帐户中运行肆意代码。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16862
5.Microsoft Exchange Server远程代码执行缝隙（CVE-2020-16875 ）
由于对cmdlet参数的验证不正确，Microsoft Exchange服务器中存在一个远程代码执行缝隙。成功利用此缝隙的攻击者能够在受影响的系统上执行肆意代码。
具体信息及补丁下载地址：
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16875
0x02 措置建议
微软官方已于2020年09月08日颁布了有关软件的安全更新，建议用户实时更新有关补丁。
下载地址：
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Sep
0x03 有关新闻
https://krebsonsecurity.com/2020/09/microsoft-patch-tuesday-sept-2020-edition/
https://blog.qualys.com/vulnerabilities-research/2020/09/08/september-2020-patch-tuesday-129-vulnerabilities-23-critical-sharepoint-exchange-windows-codecs-adobe-vulns
0x04 参考链接
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Sep
0x05 功夫线
2020-09-08微软官方颁布安全更新
2020-09-09 VSRC颁布安全公告
京公网安备11010802024551号