ɳ°ÍÌ©ºÏϵÁвúÆ·ÖúÁ¦¿Í»§Ò»¼ü»º½âÊÀ½ç¼¶¸ßΣ·ì϶CVE-2019-0708

°ä²¼¹¦·ò 2019-05-16
2019Äê5ÔÂ14ÈÕ  £¬ÉϰñÁËÒ»¸ö¸ßΣ·ì϶CVE-2019-0708¡£

È«ÇòÁìÓòÄÚÔ¼ÓÐ400Íò  £¬¹úÄÚÔ¼ÓÐ80ÍòÖ÷»ú¿ªÆôÁËÔ¶³Ì×ÀÃæ·þÎñ²¢Â¶³öÔÚ»¥ÁªÍøÉÏ  £¬Ò²¾ÍÊÇ˵  £¬ÀûÓÃÕâ¸ö·ì϶¸ù»ùÄܹ»·ÛËéËÄ·ÖÖ®Ò»µÄWindows·þÎñÆ÷  £¬Ìý×ÅÊDz»ÊǺÜÏÅÈË£¿£¿£¿

Óа²È«¹¤³ÌʦÆÀ¼ÛÕâ¸ö¸ßΣ·ì϶ÊÇ£ºÊÀ½ç¼¶µÄ¡£

È«ÊÀ½ç°²È«¹¤³Ìʦ¶¼ÔÚ×êÑÐÕâ¸ö¸ßΣ·ì϶  £¬ÎÒÃÇ´óÌ©ºÏµÄʹÃü¸ÐҲ˲¼ä·¢×÷~~~
 
ÏÂÃæ  £¬Çë¼øÉÍɳ°ÍÌ©ºÏϵÁвúÆ·ÈôºÎ»º½âºÅ³ÆÊÀ½ç¼¶¸ßΣ·ì϶

1.Ì©ºÏNBAÁ÷·ÖÎöϵͳ
 
´ÓÍøÂçÁ÷Á¿ÖÐ  £¬·¢ÏÖ3389¶Ë¿Ú½Ó¼û¹ØÏµ  £¬Ò»¼üÖúÁ¦¿Í»§²é¿´Éæ¼°IP¡¢Ò»¼ü²é¿´3389¶Ë¿ÚÊýÁ¿  £¬Ò»¼ü²é¿´½Ó¼û¹ØÏµ~~~·½±ã¿Í»§¼±¾ç¶¨Î»·çÏÕÒþ»¼¡£
 

ɳ°Í(Öйú)ÍøÕ¾ÓÐÏÞ¹«Ë¾¹ÙÍø


ɳ°Í(Öйú)ÍøÕ¾ÓÐÏÞ¹«Ë¾¹ÙÍø


ɳ°Í(Öйú)ÍøÕ¾ÓÐÏÞ¹«Ë¾¹ÙÍø

³ýÁËÕâЩ  £¬Ì©ºÏNBAÁ÷·ÖÎöϵͳ»¹Äܹ»Ô®ÊÖÓû§·¢ÏÖ  £¬Ö÷»ú¿ªÆôÁËÄÄЩÆäËû¶Ë¿Ú  £¬ÓëÄÄЩÖ÷»úÓйØÁª¹ØÏµµÈ¡£
 
ɳ°Í(Öйú)ÍøÕ¾ÓÐÏÞ¹«Ë¾¹ÙÍø
 
2.Ì©ºÏAEM×ʲúÖÎÀíϵͳ

´ÓËùÓÐIT×ʲúÖÐ  £¬Ò»¼üÖúÁ¦¿Í»§·¢ÏÖÈ«ÍøËùÓпªÆô3389¶Ë¿ÚµÄÖ÷»ú  £¬Ò»¼üɸ²é¿ÉÄÜÓ°ÏìµÄIPÊýÁ¿  £¬Ò»¼ü¶¨Î»É豸ÔðÈÎÈË  £¬·½±ã¿Í»§¼±¾çÅŲé·çÏÕÒþ»¼¡£
 
ɳ°Í(Öйú)ÍøÕ¾ÓÐÏÞ¹«Ë¾¹ÙÍø
 
3.Ì©ºÏCSAÌ¬ÊÆ¸Ð֪ƽ̨ϵͳ
 
ÒѾ­²¿ÊðÌ©ºÏÌ¬ÊÆ¸Ð֪ƽ̨ϵͳµÄÓû§  £¬Ò»¼üÖúÁ¦¿Í»§Õ¹Ê¾ÝÓÈÆ3389µÄ¹¥»÷Ô´Í·  £¬Ò»¼ü¸ø³öÈ«Íø°²È«Ö¸±êϵͳ  £¬Ò»¼ü¸ø³ö±í²¿Íþвµý±¨ÓëÄÚ²¿Ö÷»úµÄÅöײ  £¬ÝÓÈÆ3389¶Ë¿ÚµÄÊÂÎñÈ«ÃæÕ¹Ê¾¡£
 
ɳ°Í(Öйú)ÍøÕ¾ÓÐÏÞ¹«Ë¾¹ÙÍø

4.Ì©ºÏSOC°²È«ÖÎÀíÆ½Ì¨
 
ÒѾ­²¿ÊðÌ©ºÏ°²È«ÖÎÀíÆ½Ì¨µÄÓû§  £¬Äܹ»ÒÀÕÕ¶ÔÓ¦µÄÕ½ÊõÉèÖà  £¬ÊµÊ±Éý¼¶¹ØÁª·ÖÎö¹æ¶¨  £¬Ìáǰ½øÐÐ3389¶Ë¿ÚµÄ¸æ¾¯Õ½ÊõÓÅ»¯¡£
 
ɳ°Í(Öйú)ÍøÕ¾ÓÐÏÞ¹«Ë¾¹ÙÍø
 
5.Ì©ºÏ±±¶·°²È«·þÎñµÄ¼¸µã½¨Òé
 
´ò²¹¶¡£ºÎ¢ÈíÒѾ­°ä²¼Õë¶Ô¸Ã·ì϶µÄ²¹¶¡  £¬ÇëʹÓÃÉÏÊöÊÜÓ°ÏìµÄ²Ù×÷ϵͳÓû§ÊµÊ±¸üС£
https://support.microsoft.com/en-us/help/4500705/customer-guidance-for-cve-2019-0708
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708

¹Ø¶Ë¿Ú£ºÎÞ·¨ÊµÊ±¸üв¹¶¡µÄÓû§  £¬Ç뾡Á¿¹Ø¹ØÔ¶³Ì×ÀÃæ·þÎñ  £¬Ô¤·ÀÖ÷»ú±»Ö±½Ó¶³öÔÚ»¥ÁªÍøÉÏ¡£

²¿²úÆ·£º½¨ÒéÓû§²¿ÊðNBAÁ÷Á¿Òì³£·ÖÎö¡¢SAÈÕÖ¾Éó¼ÆÏµÍ³¡¢AEM×ʲúÖÎÀíϵͳ¡¢CVSÅäÖú˲éϵͳ  £¬ÎªÒÔ3389¶Ë¿ÚµÄÊÂÎñ½øÐÐʵʱ·¢Ïֺͷì϶²¹´ò  £¬ÎªÆ½Ì¨²úÆ·Ìṩ»ù´¡Êý¾ÝÖ§³Ö¡£

²¿Æ½Ì¨£ºCSAÌ¬ÊÆ¸Ð֪ƽ̨ϵͳ¡¢SOC°²È«ÖÎÀíÆ½Ì¨  £¬ÎªºóÐøÌ¬ÊÆ·ÖÎö¡¢ÊÂÎñ·ÖÎö¡¢ÊÂÎñÏìÓ¦Ìṩ¾ö²ßÖ§³Ö¡£