SOCƽ̨°¸Àý£ºÌ©ºÏ°²¹Üƽ̨Õë¶ÔʹÓÃMicrosoftOffice¹«Ê½±à¼Æ÷Îó²îµÄ¼à²âÓëÏìÓ¦
Ðû²¼Ê±¼ä 2018-05-311.°¸Àý¸ÅÊö
½üÆÚ£¬Ä³ÆóÒµµ¥Î»°²ÅŵÄTSOCƽ̨·¢Ã÷ÁËʹÓá°Office¹«Ê½±à¼Æ÷Îó²î£¨CVE-2017-11882£©¡±µÄ¹¥»÷ÐÐΪ¡£´ËÎó²îÊÇÒ»¸öDZÔÚÁË17ÄêÖ®¾ÃµÄÎó²î£¬ÊôÓÚOfficeÄÚ´æÆÆËðÎó²î£¬Ó°Ïì2017Äê11ÔÂÇ°Ê¢ÐеÄËùÓÐOffice°æ±¾£¬¹¥»÷Õß¿ÉÒÔʹÓÃÎó²îÒÔÄ¿½ñÓû§Éí·ÝÖ´ÐÐí§ÒâÏÂÁÔÚ2017Äê11ÔÂ4ÈÕ£¬Î¢ÈíÐû²¼µÄÇå¾²²¹¶¡°üÖÐÒÑ°üÀ¨´ËÎó²îµÄÐÞ¸´³ÌÐò£©¡£
Ì©ºÏ±±¶··þÎñÍŶӽӵ½Í¨Öªºó£¬µÚһʱ¼äͨ¹ýÇå¾²ÖÎÀíƽ̨¾ÙÐÐÏìÓ¦´¦Öóͷ££¬Í¨Ì«¹ýÎö·¢Ã÷°ì¹«ÇéÐÎÖÐijÓû§ÔÚ²»ÖªÇéµÄÇéÐÎÏ·¿ªÁËÒ»·Ý¶ñÒâÎĵµ£¬µ¼Ö´¥·¢Office¹«Ê½±à¼Æ÷Îó²î£¨CVE-2017-11882£©£¬²¢ÅþÁ¬Ô¶³Ì¶ñÒâµØµãÎüÊÕ¹¥»÷Ö¸Áî¡£
2.ÊÂÎñÆÊÎö
2.1ÊÂÎñ×·ËÝ
2018Äê1ÔÂ11ÈÕ£¬ÔÚijÆóÒµµ¥Î»°²ÅŵÄTSOCƽ̨Öз¢Ã÷ÓС°L2_MC_officeÎó²îÍâÁ´Á´½Ó¡°µÄÊÂÎñ¸æ¾¯¡£
ͬʱ£¬¸ÃÆóÒµµ¥Î»µÄÄÚÍøÇéÐÎÖа²ÅÅÁËTSOC-FCÁ÷ÊÕÂÞÆ÷(TSOC-FCΪ̩ºÏÇå¾²ÖÎÀíƽ̨Á÷ÊÕÂÞ̽Õ룬ͨ¹ýÍøÂçÁ÷Á¿¾µÏñ»ò/ºÍÎüÊÕÍøÂçFLOWÊý¾Ý£¬¶Ô³£¼ûÐÒéÆÊÎöÈçHTTP/DNS/FTP/SMBµÈÐÒé»á»°ÐÅÏ¢¾ÙÐмͼ£¬²¢½«ÐÅÏ¢ÉÏ´«¸øTSOC¾ÙÐÐ×ÛºÏÆÊÎö)£¬¶Ô¸Ã¸æ¾¯ÊÂÎñ¾ÙÐÐ×·ËÝÆÊÎö£¬·¢Ã÷Á÷Á¿ÈÕÖ¾ÖÐÒ»¸öÄÚÍø°ì¹«ÖÕ¶ËʵÑé»á¼û¡°http://gamesarena.gdn¡±µÄÈÕÖ¾¼Í¼¡£
2.2ÊÂÎñÆÊÎö
ÍøÂçÓòÃû¡±http://gamesarena.gdn¡±µÄÍþвÇ鱨£¬Í¨¹ýÍþвÇ鱨ÅÌÎʵ½¸ÃÓòÃûºÍ2017Äê11Ô·ݵġ±office¹«Ê½±à¼Æ÷¡±Îó²îÓйØÁª¡£
½«¸ÃÊÂÎñµÄÄÚÍøµØµã×÷ΪĿµÄµØµã¾ÙÐÐÊӲ죬Éó²é½üÆÚÍâÍø¶Ô¸ÃÄÚÍøµØµãµÄÆäËûÅþÁ¬ÊÂÎñ£¬ÆäÖз¢Ã÷ÁË¡°POP3_¿ÉÖ´ÐеÄÓʼþ¸½¼þת´ï¡°ÊÂÎñ£¬¸½¼þÃû³ÆΪ¡°2017.doc¡±¡£
¶ÔËùÓеÄÊÂÎñ¾ÙÐйØÁªÆÊÎö£¬½«Õû¸ö¹¥»÷Á÷³ÌÃè»æ³öÀ´ÈçÏ£º
¹¥»÷Õßͨ¹ýÓʼþµÄÐÎʽ·¢ËÍ´øÓжñÒ⸽¼þµÄÓʼþ¸øÊܺ¦Õߣ¬µ±Êܺ¦Õß·¿ª¸½¼þ²¢ÆôÓñ༺ó£¬Êܺ¦ÕßµÄÖ÷ʱ»ú¶ÔÅþÁ¬ÎĵµÖеĶñÒâµØµã£¬È¥»ñÈ¡¹¥»÷Ö¸Áµ«ÓÉÓÚhttp://gamesarena.gdnÏÖÔÚÒѾÎÞ·¨»á¼û£¬Êܺ¦ÕßÖ÷»úÎÞ·¨»ñÈ¡½øÒ»²½µÄÖ¸Áî¡£
2.3ÊÂÎñÏìÓ¦
Õë¶Ô¸ÃÊÂÎñÆÊÎö´¦Öóͷ££¬Ì©ºÏ±±¶··þÎñÍŶÓÒÀÍÐÌ©ºÏÇå¾²ÖÎÀíƽ̨½¨ÉèÁ˼à²â¹æÔò£¬ÓÃÓڶԸù¥»÷ÐÐΪ¾ÙÐÐʵʱ¼à¿ØºÍ¸æ¾¯£¬¹æÔòÈçÏ£º
Õë¶Ô±¾´Î°¸ÀýÖеÄÎÊÌ⣬±±¶·ÍŶӽ¨ÒéÓû§½ÓÄÉÈçϲ½·¥£º
1£©½¨Òé×°ÖÃ2017Äê11Ô·Ý΢ÈíÐû²¼µÄ²¹¶¡(KB2553204¡¢KB3162047¡¢KB4011276ºÍKB4011262£©£¬ÓÃÓÚÐÞ¸´CVE-2017-11882Îó²î¡£
2£©·¿ªÏµÍ³×Ô¶¯¸üУ¬ÊµÊ±¸üÐÂ΢Èí¹Ù·½µÄ×îв¹¶¡¡£
3£©¶ÔÊܺ¦Ö÷»ú¾ÙÐÐÖÜÈ«²éɱ¡£
3.¿¢ÊÂÓï
ƾ֤̩ºÏ±±¶··þÎñÍŶӶàÄê´ÓÊÂÇå¾²ÖÎÀíƽ̨µÄÔËάÂÄÀú£¬ÏëÒª³ä·ÖÑéÕ¹°²¹Üƽ̨µÄ¼ÛÖµ£¬ÌåÏÖƽ̨ÔÚÇå¾²ÊÂÎñÆÊÎö·½ÃæµÄЧ¹û£¬Í¨³£ÐèÒª´ÓÏîÄ¿½¨ÉèÓëÔËάÖÎÀíÖƶȡ¢Çå¾²ÖÎÀí×éÖ¯¡¢Çå¾²Ö°Ô±ÊÖÒÕˮһÂɼ¸·½ÃæÅäºÏÆ𾢡£ÆäÖÐÇå¾²ÊÖÒÕÖ°Ô±ÐèÒªÏàʶ×îеÄÇå¾²¶¯Ì¬£¬ÊµÊ±µ÷½âÇå¾²·À»¤Õ½ÂԺͼì²â¹æÔò¡£ÔËάÇå¾²ÖÎÀíƽ̨£¬Í¨³£ÐèÒªÇå¾²ÊÖÒÕÖ°Ô±¾ÙÐÐÈçÏÂÊÂÇ飺
1¡¢ÁýÕÖÓªÒµ¹æÄ£µÄÈ«Á¿ÈÕÖ¾ÍøÂ磻
2¡¢ÈÕÖ¾µÄ¹ýÂËÓë½µÔ룻
3¡¢ÈÕÖ¾±ê×¼»¯ÓëϸÄ廯ÊáÀí£»
4¡¢ÍŽáÓªÒµ¾ÙÐÐÒªº¦ÐÅÏ¢²¹È«£»
5¡¢Æ¾Ö¤¹¥»÷³¡¾°ºÍ¹¥»÷ÌØÕ÷½¨Éè¹ØÁªÆÊÎöÄ£×Ó£»
6¡¢ÔÚ¹ØÁªÆÊÎöÀú³ÌÖÐÒýÓÃÍⲿÍþвÇ鱨£»
4.¹ØÓÚÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍøÌ©ºÏTSOCÇå¾²ÖÎÀíƽ̨
ÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍø×÷ΪÖйúÐÅÏ¢Çå¾²ÐÐÒµµÄÁ캽ÆóÒµ£¬ÓµÓÐÍêÕûµÄÐÅÏ¢Çå¾²ÊÖÒÕ¡¢²úÆ·¡¢½â¾ö¼Æ»®ºÍ·þÎñÄÜÁ¦£¬ÒѾ³ÉΪÕþ¸®¡¢µçÐÅ¡¢½ðÈÚ¡¢ÄÜÔ´¡¢½»Í¨¡¢ÖÆÔìµÈÁìÓòÄÚº£Äڸ߶˿ͻ§ÇàíùµÄÆ·ÅÆ¡£
ÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍøרÃŽ¨ÉèÁËÌ©ºÏ²úÆ·±¾²¿ÈÏÕæ´óÊý¾ÝÇå¾²ÆÊÎöÁìÓò¼°Ì©ºÏϵÁÐÇå¾²ÖÎÀíÀà¡¢Éó¼ÆÀàºÍÁ÷Çå¾²ÆÊÎöÀàϵͳµÄÑз¢¡¢×Éѯ¡¢ÏîĿʵÑéÓëÔËά¡£Ì©ºÏ²úÆ·±¾²¿±æ±ðÔÚ±±¾©¡¢ÉϺ£¡¢º¼ÖÝ¡¢¹ãÖݵȵØÉèÓÐÑз¢ÖÐÐÄ¡£
¡ô2017Ä꣬ÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍøµÄÌ©ºÏ°²¹Üƽ̨³ÉΪÊ׸ö½øÈëGartnerSIEMħÁ¦ÏóÏÞµÄÖйú°²¹Üƽ̨²úÆ·¡£
¡ôƾ֤ÈüµÏ±¨¸æ£¬´Ó2008ÄêÖÁ½ñ£¬ÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍøµÄÌ©ºÏ°²¹Üƽ̨ÒѾһÁ¬9Äêλ¾ÓÖйúÊг¡Õ¼ÓÐÂʵÚÒ»Ãû¡£
¡ôƾ֤IDCµÄ±¨¸æ£¬´Ó2015ÄêÖÁ½ñ£¬ÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍøµÄÌ©ºÏ°²¹Üƽ̨ÒѾһÁ¬2Äêλ¾ÓÖйúÊг¡Õ¼ÓÐÂʵÚÒ»Ãû¡£