ÖÐÎÄ
½»Á÷»ú
Ô°ÇøÍø½»Á÷»ú
Êý¾ÝÖÐÐÄÓëÔÆÅÌËã½»Á÷»ú
ÐÐÒµ¾«Ñ¡½»Á÷ϵÁÐ
¹¤Òµ½»Á÷»ú
Åä¼þ
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
·ÓÉÆ÷
»ã¾Û·ÓÉÆ÷
ÐÐÒµ¾«Ñ¡Â·ÓÉÆ÷ϵÁÐ
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
ÎÞÏß
·Å×°ÐÍÎÞÏß½ÓÈëµã
Ç½ÃæÐÍÎÞÏß½ÓÈëµã
ÖÇ·ÖÎÞÏß½ÓÈëµã
ÊÒÍâÎÞÏß½ÓÈëµã
³¡¾°»¯ÎÞÏß
ÎÞÏß¿ØÖÆÆ÷
ÐÐÒµ¾«Ñ¡ÎÞÏßϵÁÐ
ÎÞÏß¹ÜÀíÓëÓ¦ÓÃ
ÔÆ×ÀÃæ
ÔÆÖÕ¶ËϵÁÐ
ÔÆÖ÷»úϵÁÐ
ÔÆ×ÀÃæÈí¼þϵÁÐ
Åä¼þϵÁÐ
·þÎñ²úÆ·
Çå¾²
´óÊý¾ÝÇ徲ƽ̨
ÏÂÒ»´ú·À»ðǽ
Çå¾²Íø¹Ø
¼ì²â¹ÜÀíÇå¾²
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
Èí¼þ
Éí·Ý¹ÜÀí
·þÎñ²úÆ·
»ù´¡Î¬»¤·þÎñ
ÔËά¹ÜÀí·þÎñ
Çå¾²·þÎñ
±¸¼þÓëÀ©ÈÝ·þÎñ
ÅàѵÓëÈÏÖ¤·þÎñ
Ò»¡¢ÊÂÎñÅä¾°
±±¾©Ê±¼ä6ÔÂ27ÈÕÍí¼ä£¬¾ÝÍâÑóýÌåHackerNews±¬ÁÏ£¬Ò»ÖÖÀàËÆÓÚ“WannaCry”µÄÐÂÐÍÀÕË÷²¡¶¾Ï¯¾íÁËÅ·ÖÞ£¬ÎÚ¿ËÀ¼¾³ÄÚµØÌú¡¢µçÁ¦¹«Ë¾¡¢µçÐŹ«Ë¾¡¢Çжûŵ±´ÀûºËµçÕ¾¡¢ÒøÐÐϵͳµÈ¶à¸ö¹ú¼ÒÉèÊ©¾ùÔâѬȾµ¼ÖÂÔËÐÐÒì³£¡£¸Ã²¡¶¾Îª“Petya”±äÖÖ²¡¶¾£¬Í¨¹ýÓÊÏ丽¼þÈö²¥¡£Áí¾ÝÎÚ¿ËÀ¼CERT¹Ù·½ÐÂÎųƣ¬ÓÊÏ丽¼þ±»È·ÈÏÊǸôβ¡¶¾¹¥»÷µÄÈö²¥Ô´Í·¡£¸ÃÀÕË÷²¡¶¾ÔÚÈ«Çò¹æÄ£ÄÚ±¬·¢£¬Êܲ¡¶¾ÇÖÏ®µÄ¹ú¼Ò³ýÁËÎÚ¿ËÀ¼Í⣬ÉÐÓжíÂÞ˹¡¢Î÷°àÑÀ¡¢·¨¹ú¡¢Ó¢¹úÒÔ¼°Å·ÖÞ¶à¸ö¹ú¼Ò£¬ºóÐø²»É¨³ý»á¼ÌÐøÉìÕŵ½°üÀ¨ÖйúÔÚÄÚµÄÑÇÖÞ¹ú¼Ò¡£
¶þ¡¢²¡¶¾ÆÊÎö
¾ÓÉ97¹ú¼ÊÇå¾²²úÆ·ÊÂÒµ²¿µÄȡ֤Ñо¿£¬Õâ´Î¹¥»÷ÊÇÀÕË÷²¡¶¾“Petya”µÄ±äÖÖ£¬²¡¶¾Èö²¥Àú³ÌʹÓõ½windowsµÄÁ½¸öÎó²î¡£µÚÒ»²½ÊÇʹÓÃCVE-2017-0199Îó²î·¢ËÍÓʼþ£¬½«²¡¶¾Ìí¼ÓÔÚoffice¸½¼þÀPCÒ»µ©·¿ª¸½¼þ£¬µÚÒ»¸öÈö²¥µÄÔ´Í·±»Ñ¬È¾Àֳɡ£µÚ¶þ²½ÊÇͨ¹ýMS17-010£¨ÓÀºãÖ®À¶£©Îó²îºÍϵͳÈõ¿ÚÁî¾ÙÐÐÈö²¥¡£Îó²îµÄÏêϸʹÓÃÇéÐÎÈçÏ£º
Îó²îÒ»£ºCVE-2017-0199Îó²î
Îó²î˵Ã÷£ºCVE-2017-0199ÔÊÐí¹¥»÷ÕßʹÓôËÎó²îÓÕʹÓû§·¿ª´¦Öóͷ£ÌØÊâ½á¹¹µÄOfficeÎļþÔÚÓû§ÏµÍ³ÉÏÖ´ÐÐí§ÒâÏÂÁ´Ó¶ø¿ØÖÆÓû§ÏµÍ³¡£
ʹÓÃÒªÁ죺ʹÓøÃÎó²î£¬ºÚ¿Í¿ÉÒÔ½«ÀÕË÷Èí¼þµÄ´úÂëǶÈëÁËofficeÎĵµÖУ¬ÀýÈçword¡¢PPT¡¢ExcelµÈ£¬×÷Ϊ¸½¼þαװ³ÉÇóÖ°¡¢¹ã¸æµÈͨ¹ýµç×ÓÓʼþÈö²¥¡£Óû§ÊÕµ½¾ÓÉαװµÄÓʼþºó£¬Ò»µ©·¿ª£¬ÀÕË÷²¡¶¾ÊͷųɿÉÖ´ÐÐÎļþ¡£
Îó²î¶þ£ºMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²î
Îó²î˵Ã÷£ºMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²îÊǽñÄê4Ô·½³Ìʽ×é֯й¶µÄÖ÷ÒªÎó²îÖ®Ò»¡£“ÓÀºãÖ®À¶”ʹÓÃWindows SMBÔ¶³ÌÌáȨÎó²î£¬¿ÉÒÔ¹¥»÷¿ª·Å445 ¶Ë¿ÚµÄ Windows ϵͳ²¢ÌáÉýȨÏÞ¡£
ʹÓÃÒªÁ죺Ê×ÏÈ£¬TCP ¶Ë¿Ú 445ÊÇÔÚWindows ϵͳÖÐÌṩ¾ÖÓòÍøÖÐÎļþ»ò´òÓ¡»ú¹²Ïí·þÎñ£¬ºÚ¿ÍʵÑéÓëµçÄÔ445¶Ë¿Ú½¨ÉèÇëÇóÅþÁ¬£¬Ò»µ©ÅþÁ¬Àֳɣ¬¾ÍÄܹ»»ñµÃ¾ÖÓòÍøÄÚ¹²ÏíµÄÎļþ»òÐÅÏ¢¡£Í¨¹ýµÚÒ»¸öÎó²îѬȾµÄµÚһ̨PC¼Ì¶øÊ¹ÓÃMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²îѬȾ¾ÖÓòÍøÖпª·Å445¶Ë¿ÚµÄËùÓÐPC¡£
±¾´ÎÀÕË÷²¡¶¾ÁýÕÖµÄÖÕ¶ËÊÇwindows XP¼¶ÒÔÉϲÙ×÷ϵͳ£¬µçÄÔ¡¢·þÎñÆ÷ѬȾÕâÖÖ²¡¶¾ºó»á±»¼ÓÃÜÌØ¶¨ÀàÐÍÎļþ£¬µ¼ÖÂϵͳÎÞ·¨Õý³£ÔËÐС£²î±ðÓڹŰåÀÕË÷Èí¼þ¼ÓÃÜÎļþµÄÐÐΪ£¬“Petya”ÊÇÒ»¸ö½ÓÄÉ´ÅÅ̼ÓÃÜ·½·¨£¬¼ÓÃÜÀֳɺ󣬻áÏÔʾÀÕË÷ÐÅÏ¢µÄ½çÃæ£¬ÈôÊÇÊܺ¦Õß²»Ö§¸¶Êê½ð£¬»ù´¡ÎÞ·¨½øÈëϵͳ¡£
±»¼ÓÃܺóµÄÀÕË÷ÐÅÏ¢
Èý¡¢Çå¾²½¨Òé
1¡¢ ¶ñÒâÓʼþÌá·À
¸ÃÀÕË÷Èí¼þÊ×´ÎÈö²¥ÊÇͨ¹ýÓʼþ¾ÙÐеģ¬¹Ê´Ë£¬Óöµ½Ð¯´ø²»Ã÷office¸½¼þºÍ²»Ã÷Á´½ÓµÄÓʼþÇëÎðµã»÷¸½¼þ¡£
2¡¢ Õë¶ÔCVE-2017-0199¡¢MS-17-010Á½¸öÎó²îʵʱװÖÃÎó²î²¹¶¡
£¨CVE-2017-0199) RTFÎó²î²¹¶¡µØÖ·£º
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199
S17-010£¨ÓÀºãÖ®À¶£©Îó²î²¹¶¡µØÖ·£º
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
3¡¢ ½ûÓÃWMI·þÎñ
https://msdn.microsoft.com/en-us/library/aa826517(v=vs.85).aspx
4¡¢ ·À»ðǽ·À»¤
97¹ú¼ÊÍøÂçÒѸüзÀ»¤ÌØÕ÷¿â£¬ÈôÊÇÄúÊÇ97¹ú¼ÊÈ«ÐÂÏÂÒ»´ú·À»ðǽ²úÆ·µÄÓû§£¬Çëʵʱ¸üе½Èçϰ汾£º²¡¶¾Ñù±¾¿â£º49.00830£» IPSÌØÕ÷¿â£º11.00168
ËÄ¡¢×ܽ᣺
»ØÊדPetya”±äÖÖ²¡¶¾ºÍ“wannacry”ÊÂÎñ£¬ÀÕË÷²¡¶¾ËùʹÓõÄÊֶβ¢²»ÊǺÜÊǸ߼¶µÄ¹¥»÷ÒªÁ죬ʹÓõÄÎó²îÒ²²¢·Ç0-dayÎó²î£¬¶øÊÇ΢ÈíÔçÒÑÐû²¼Í¨¸æµÄÒÑÖªÎó²î£¬Èö²¥µÄÒªº¦ÒòËØÔÚÓÚµçÄÔ»ò·þÎñÆ÷±£´æÎ´ÊµÊ±¸üеÄÎó²îºÍÈõ¿ÚÁî¡£Òò´Ë£¬ÆóÒµºÍСÎÒ˽¼Ò¶¼Ó¦ÈÏÕæË¼Ë÷Ç徲ϵͳ½¨ÉèµÄ»ù´¡ÊÂÇ飬СÎÒ˽¼ÒµçÄÔӦʵʱװÖòÙ×÷ϵͳ²¹¶¡£¬¾Ü¾øÈõ¿ÚÁî²¢°´ÆÚÌæ»»ÃÜÂ룬Óöµ½²»Ã÷È·µÄÓʼþ²»ÒªÈÝÒ×·¿ª¡£ÆóÒµÓû§Ó¦ÔÚÍøÂç½çÏß°²ÅÅ¿ÉÒÔʵʱÌṩÏìÓ¦ÌØÕ÷¿âºÍ·À»¤Õ½ÂÔµÄÇå¾²×°±¸£¬¾¡Ô翪Æô·À»¤Õ½ÂÔ²¢ÊµÊ±¸üÐÂÌØÕ÷¿â¡£·À»¼ÓÚδȻ£¬×öºÃÇå¾²£¬ÆóÒµ²Å»ª¸üºÃµØÉú³¤¡£