Vuto la Windows Installer chigawo, chomwe Microsoft chayesapo mobwerezabwereza, talandira chigamba china kuchokera ku ma 0Patch ntchito yotheka kupeza mwayi wopeza bwino.
Vuto la chiopsezo limakhudza Windows 7 ndi Windows 10. Vuto limakhala ndi Cve-2020-16902. Microsoft yayesera kale kuthetsa vutoli mu Epulo 2019 ndi Okutobala 2020, koma osachita bwino.
Pakukhazikitsa phukusi la MSI, Windows Instaler amapanga script pogwiritsa ntchito msiexec.exe kuti muchepetse kusintha kulikonse ngati china chake chimalakwika panjirayo. Cybercrinator okhala ndi mwayi wam'deralo amatha kuyambitsa fayilo yovomerezeka ndi chilolezo cha dongosolo, chomwe chimakupatsani mwayi wosintha scriptur kuti musinthe mtengo womwe ukusintha.
Vuto lidapezeka ndipo poyamba linawonetsedwa mu Epulo 2019, koma akatswiri azachipatala ochokera ku Sandbox adapeza ntchito mu Meyi 2019, kufalitsa tsatanetsatane wa ukadaulo.
Nkhani ya Windows Inlerler idabwerezedwa kasanu ndi kanayi pazaka ziwiri zapitazi - itha kugwiritsidwabe ntchito kuti iwonjezere mwayi wowonjezera pazomwe zidalipo.
Mumma Colerk, Acros Security Ceo ndi matchune a kampani 0patch, adafotokozera momwe mungapangire Windows Instaler, kulola kuthetsa chiopsezo.
"Ngakhale Microsoft satulutsa chigamba chokhazikika cha Windows Instaler, aliyense adzatsitsa mtundu wa kanthawi kochepa kwa chigamba pa nsanja yathu ya 0Patch. Malangizowa ali ndi malangizo amodzi, kudalinso dongosolo sikungafunikire, "anatero Molsek.
Pa kanema pansipa, mutha kuwona kuti chigamba chokwera kuchokera ku 0patch sichimalola wogwiritsa ntchito wa atomilandu, amasintha mtengo wowunikira Mapulogalamu Oseketsa:
Zinthu zosangalatsa kwambiri pa Cisoclub.ru. Alembetsa ku US: Facebook | VK | Twitter | Instagram | Telegraph | Zen | Nthumwi | ICQ yatsopano | Youtube | .