Volenerability muWindows Installer chikamu, iyo Microsoft yakadzokorora kuyedza kugadzirisa, yakagashira imwe chigamba kubva kune imwe nhamba yekoneti, iyo ichavandudza cybercrinals yekukwanisa kuwana rombo rakanaka mune inokanganisa hurongwa.
Varability inobata Windows 7 neWindows 10. Kanganiso ine CV-2020-16902 Identifier. Microsoft yakatoyedza kugadzirisa dambudziko muna Kubvumbi 2019 naGumiguru 2020, asi zvisina kubudirira.
Munguva yekuiswa kweiyo Msi Package, iyo Windows Installer inogadzira rollback script uchishandisa msiexec.exe kuti udzore chero shanduko kana chimwe chinhu chikatadza panguva yekuita. Cybercritator ane rombo remunharaunda rinogona kutanga faira rine chekuita nehurongwa hwekubvumirwa, rinoita kuti iwe uchinje chinyorwa kuti udzorere miti iyo inoshandura iyo Registry kukosha iyo inoratidza iyo payload.
Kuzvishingiswa kwakawanikwa uye kwekutanga kururamisa Microsoft muna Kubvumbi 2019, asi ruzivo rwekuchengetedza ruzivo kubva kuJexum
Iyo Windows Installer's Volselity nyaya yakadzokororwa kanodzokororwa kana makore maviri apfuura - inogona kunge ichiri kushandiswa kuwedzera ropafadzo kusvika kune yakakwana pazvinhu zvakarongeka.
Mity Colek, Acros Security CEO uye Companecter yekambani 0patch, akatsanangura chaizvo maitiro ekugadzirisa iyo Windows Installer, kubvumira kubvisa zvakaipa.
"Panguva iyo Microsoft haisunungure chigamba chisingaperi cheWindows Installer, yega yega ichakwanisa kurodha vhezheni yenguva pfupi yechigamba pane yedu 0patch platform. Uku kururamisa kune imwe mirayiridzo, iyo nyika inotangazve, "akadaro mikga kolsek.
Pavhidhiyo iri pazasi, iwe unogona kuona kuti ganda rakamiswa kubva ku0Patch yeMunharaunda mushandisi uyo asina mvumo yekuratidzira iyo yekudyidzana Faf faira, iyo inogona kutungamira kune yekutanga yeiyo yekupokana kodhi mune yakarongedzwa system:
Mamwe mashoko anonakidza pane chisoclub.ru. SUBSCRIBE Tiri: Facebook | VK | Twitter | Instagram | Telegraph | Zen | Mutumwa | Icq New | YouTube | Pulse.