在线黑客:微软CTF协议缝隙预警

2019年8月13日，google安全研究员Tavis Ormandy发布博客披露了windows操作体系中CTF协议存在了多年的缝隙。
 
0x01 缝隙概况
google安全研究员Tavis Ormandy在Windows文本服务结构(MSCTF)中发现了一些从Windows XP开端就存在的规划缺点。已登录Windows体系的攻击者可以使用缝隙取得SYSTEM权限。Ormandy还在YouTube上发布了一个视频演示，通过使用该协议绑架体系用来显现登录屏幕的Windows LogonUI程序来在Windows中取得SYSTEM权限。
微软现在现已发布编号为CVE-2019-1162的安全补丁处理了Windows操作体系高档本地进程调用(ALPC)中相关的问题，现在尚不清楚是否还会发布针对其它组件的补丁来修补MSCTF。
 
0x02 影响版别
CVE-2019-1162受影响的版别如下：
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for 64-based Systems
Windows 10 Version 1709 for ARM64-basedSystems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for ARM64-basedSystems
Windows 10 Version 1803 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for ARM64-basedSyst $type = Get-NtType File

[1][2][3][4]黑客接单网

ems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for ARM64-basedSystems
Windows 10 Version 1903 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2008 for 32-bit SystemsService Pack 2
Windows Server status = NtCreateUserProcess(alias.ApplicationName, 2008 for 32-bit SystemsService Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based SystemsService Pack 2
Windows Server 2008 for x64-based SystemsService Pack 2
Windows Server 2008 for x64-based SystemsService Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-BasedSystems Service Pack 1
Windows Server 2008 R2 for x64-based SystemsService Pack 1
Windows Server 2008 R2 for x64-based SystemsService Pack 1 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Coreinstallation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Coreinstallation)
Windows Server 2016
Windows Server 2016 (Server Coreinstallation)
Windows Server 2019
Windows Server 2019 (Server Coreinstallation)
Windows Server, version 1803 (Server CoreInstallation)
Windows Server, version 1903 (Server Coreinstallation