"MS.Windows.ITaskScheduler.Privilege.Escalation"
- 特征库ID:
47972
- 漏洞级别:
critical
- CVE ID:
CVE-2019-1069
- 建议的动作:
drop
- 受影响的系统:
Windows
- 协议:
tcp
攻击漏洞描述
这表明可能存在针对 Microsoft Windows 中的权限提升漏洞的攻击。该漏洞是由 Windows 任务计划程序从旧版本的 Windows 导入任务时出现的错误引起的。成功利用可能导致易受攻击的系统上的用户权限未经授权升级。
影响范围
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1709 for ARM64-based Systems
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
可能带来的后果
权限提升:远程攻击者可以利用他们对易受攻击系统的权限
解决办法
应用供应商提供的最新升级或补丁。 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069