发布日期：2020-06-09
更新日期：2020-07-16

受影响系统：

Microsoft Windows Server version 2004 (Server Core Inst
Microsoft Windows Server version 1909 (Server Core Inst
Microsoft Windows Server version 1903 (Server Core Inst
Microsoft Windows Server version 1803 (Server Core Inst
Microsoft Windows Server 2019 (Server Core Installation
Microsoft Windows Server 2019
Microsoft Windows Server 2016 (Server Core Installation
Microsoft Windows Server 2016
Microsoft Windows 10 Version 2004 for x64-based Sys
Microsoft Windows 10 Version 2004 for ARM64-based S
Microsoft Windows 10 Version 2004 for 32-bit System
Microsoft Windows 10 Version 1909 for x64-based Sys
Microsoft Windows 10 Version 1909 for ARM64-based S
Microsoft Windows 10 Version 1909 for 32-bit System
Microsoft Windows 10 Version 1903 for x64-based Sys
Microsoft Windows 10 Version 1903 for ARM64-based S
Microsoft Windows 10 Version 1903 for 32-bit System
Microsoft Windows 10 Version 1809 for x64-based Sys
Microsoft Windows 10 Version 1809 for ARM64-based S
Microsoft Windows 10 Version 1809 for 32-bit System
Microsoft Windows 10 Version 1803 for x64-based Sys
Microsoft Windows 10 Version 1803 for ARM64-based S
Microsoft Windows 10 Version 1709 for x64-based Sys
Microsoft Windows 10 Version 1709 for ARM64-based S
Microsoft Windows 10 Version 1709 for 32-bit System
Microsoft Windows 10 Version 1607 for x64-based Sys
Microsoft Windows 10 Version 1607 for 32-bit System
Microsoft Windows 10 for x64-based Systems
Microsoft Windows 10 for 32-bit Systems

描述：

---

CVE(CAN) ID: CVE-2020-1261

Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。Microsoft Windows Server是微软公司一套服务器操作系统。Windows Error Reporting是其中的一个错误报告组件。
Microsoft Windows Error Reporting处理内存对象的方式存在信息泄露漏洞。攻击者可借助特制应用程序利用该漏洞获取信息，从而进一步入侵用户系统。以下产品及版本受到影响：Microsoft Windows 10，Windows Server 2016，Windows Server 2019，Windows 10 1607版本，Windows 10 1709版本，Windows 10 1803版本，Windows 10 1809版本，Windows 10 1903版本，Windows 10 1909版本，Windows 10 2004版本，Windows Server 1803版本，Windows Server 1903版本，Windows Server 1909版本，Windows Server 2004版本。

<*来源：Yuki Chen (Qihoo 360 Vulcan Team，360 BugCloud)
  *>

建议：

---

厂商补丁：

Microsoft
---------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2020-1261

浏览次数：967
严重程度：0（网友投票）