Ukulimazeka kwingxenye ye-Windows Installer, okuyi-Microsoft esevele iye yazama kabusha ukulungela, ithole elinye isichibi kusuka ku-0PATCH Service, okuzonciphisa ama-cybercriminals wekhono lokuthola amalungelo aphezulu ohlelweni lokuyekethisa.
Ukulimazeka kuthinta iWindows 7 naku-Windows 10. Iphutha linesikhombi se-CVE-2020-16902. I-Microsoft isivele izama ukuxazulula inkinga ngo-Ephreli 2019 nango-Okthoba 2020, kepha ayiphumelelanga.
Ngesikhathi sokufakwa kwephakethe le-MSI, i-Windows Installer idala iskripthi se-RollBack isebenzisa i-Msiexec.exe ukukhansela noma yiziphi izinguquko uma kukhona okungahambi kahle ngesikhathi senqubo. I-cybercriminator enamalungelo endawo ingaqala ifayela elingelona iqiniso ngemvume yesistimu, elikuvumela ukuthi ushintshe umbhalo unqamule izingqikithi ezishintshayo eziguqula i-Registry Value.
Ukulimazeka kwatholakala futhi kwaqala ukulungiswa kweMicrosoft ngo-Ephreli 2019, kepha ochwepheshe bokuphepha kolwazi oluvela ku-Sandbox Escape bathola indawo ngoMeyi 2019, beshicilela eminye imininingwane yezobuchwepheshe.
Indaba ye-Windows Installer ye-Welner ye-Windows yaphindwa kane eminyakeni emibili edlule - kusengasetshenziselwa ukukhulisa amalungelo kuze kufinyelele kumadivayisi aphezulu.
I-Mitya Colek, i-CECE yezokuphepha ye-Acros kanye nomphathi wenkampani 0patch, achaze kahle ukuthi angayifaka kanjani i-Windows Installer, evumela ukuqeda ubungozi.
"Ngenkathi iMicrosoft ingadedeli i-patch yaphakade yesifaki seWindows, ngamunye uzokwazi ukulanda uhlobo lwesikhashana lwesikhulumi sePlatform yethu. Lokhu kulungiswa kunemiyalo eyodwa, ukuqala kabusha uhlelo ngeke kudingeke, "kusho uMitya Kolsek.
Kuvidiyo engezansi, ungabona ukuthi isichibi esibekiwe kusuka ku-0Patch asivumeli umsebenzisi wendawo ongenalo amalungelo okuphatha, ashintshe inani lokubhalisa elibonisa ukuthi kube ngumuntu ohlukumezanayo we-FAX insizakalo Ohlelweni oluhlehlisiwe:
Indwangu ethokozisayo ku-CisoClub.ru. Bhalisela: Facebook | I-VK | I-Twitter | I-Instagram | I-Telegraph | Zen | Isithunywa | I-ICQ New | I-YouTube | Pulse.