Windows Notepad Porogaramu ya kure ya Kode yo Gukora Vulnerability

Ikibazo gikomeye cya Windows Notepad App Remote Code Execution (RCE) cyaragaragaye, cyemerera abateye gukora code uko bishakiye kuri sisitemu yibasiwe gusa no gushuka abakoresha gufungura dosiye yabugenewe. Gusobanukirwa nuburyo iyi ntege nke ikora - nuburyo bwo kurinda ibikorwa remezo byubucuruzi - ni ngombwa kumuryango uwo ariwo wose ukorera ahantu hateye ubwoba.

Ni ubuhe buryo bukomeye Notepad ya Windows Ikoreshwa rya Kode ya kure?

Notepad ya Windows, imaze igihe ifatwa nkumwanditsi wanditse utagira icyo yangiza, barebones yahujwe na buri verisiyo ya Microsoft Windows, kuva kera byafashwe nkibintu byoroshye cyane kuburyo bidashobora guhungabanya umutekano muke. Icyo gitekerezo cyagaragaye ko atari cyo. Windows Notepad ya porogaramu ya kure ya Kode ya Windows ikoresha intege nke muburyo Notepad igereranya imiterere ya dosiye kandi ikanagabura kugabura kwibuka mugihe cyo gutanga ibikubiyemo.

Muri rusange, iki cyiciro cyintege nke mubisanzwe kirimo buffer yuzuye cyangwa kwibuka ruswa yibuka byatewe mugihe Notepad itunganya dosiye yubatswe nabi. Iyo umukoresha afunguye inyandiko yakozwe - akenshi yiyoberanya nka .txt cyangwa dosiye yinjira - shellcode yibitero ikora murwego rwumukoresha uriho. Kuberako Notepad ikoresha uruhushya rwumukoresha winjiye, uwagabye igitero arashobora kugenzura byimazeyo uburenganzira bwo kwinjira kuri konti, harimo gusoma / kwandika kugera kumadosiye yoroheje hamwe numutungo wurusobe.

Microsoft yakemuye inama nyinshi z'umutekano zijyanye na Notepad mu myaka yashize binyuze muri Patch yo ku wa kabiri, hamwe n’intege nke zashyizwe munsi ya CVEs zigira ingaruka kuri Windows 10, Windows 11, na Windows Server. Uburyo burahoraho: gusesengura kunanirwa kurema ibintu byakoreshwa byirengagiza kurinda bisanzwe.

Nigute Igitero Vector Ikora Mubintu Byukuri-Isi?

Gusobanukirwa urunigi rwibitero bifasha amashyirahamwe kubaka uburyo bwiza bwo kwirwanaho. Ikintu gisanzwe cyo gukoresha gikurikira urutonde ruteganijwe:

• Gukoresha kwibuka: Moteri ya parsing ya Notepad ihura namakuru adahwitse, bigatera ikirundo cyangwa ibirindiro byuzuye hejuru yibintu byingenzi byibukwa hamwe nibiciro byagenzuwe nabatera.
Igituma ibi bitera akaga cyane ni abakoresha kwizerana byimazeyo muri Notepad. Bitandukanye namadosiye akorwa, inyandiko zisanzwe ntizisuzumwa cyane nabakozi bashinzwe umutekano, bigatuma dosiye yatanzwe muburyo bwimibereho.

Ubushishozi Bwingenzi: Intege nke ziteye akaga ntizihora ziboneka mubisabwa bigoye, bireba interineti - akenshi baba mubikoresho byizewe, burimunsi imiryango itigeze ibona ko ari iterabwoba. Windows Notepad ni urugero rwigitabo cyerekana uburyo ibitekerezo byumurage byerekeranye na software "umutekano" bitanga amahirwe yo kugaba ibitero bigezweho.

Ni izihe ngaruka zo kugereranya hirya no hino mubidukikije bitandukanye bya Windows?

Uburemere bwiyi ntege buratandukana bitewe nibidukikije bya Windows, iboneza ryabakoresha, hamwe nuburyo bwo gucunga patch. Ibidukikije bikora bikoresha Windows 11 hamwe nibigezweho bigezweho hamwe na Microsoft Defender wagizwe muburyo bwo guhagarika isura yagabanutse cyane ugereranije nimiryango ikora kera, idashizweho Windows 10 cyangwa Windows Server.

💡 DID YOU KNOW?

Mewayz replaces 8+ business tools in one platform

CRM · Invoicing · HR · Projects · Booking · eCommerce · POS · Analytics. Free forever plan available.

Start Free →

Kuri Windows 11, Microsoft yongeye kubaka Notepad hamwe nububiko bwa porogaramu zigezweho, ikoresha nk'isanduku ya sandbox ya Microsoft Ububiko hamwe na AppContainer kwigunga mu bikoresho bimwe na bimwe. Ihinduka ryubwubatsi ritanga mituweli ifatika - niyo RCE yagerwaho, ikirenge cyabateye kibuzwa nimbibi za AppContainer. Ariko, iyi sandbox ntabwo ikoreshwa kwisi yose muburyo bwa Windows 11, kandi ibidukikije bya Windows 10 ntabwo byakirwa nkuburinzi.

Amashyirahamwe yahagaritse ivugurura ryikora rya Windows - iboneza ritangaje mubisanzwe mubidukikije bikoresha software yumurage - bikomeza kugaragara nyuma yigihe Microsoft irekuye ibice. Ingaruka ziragwira mubidukikije aho abakoresha basanzwe bakorana nuburenganzira bwabayobozi baho, iboneza ryica ihame ryamahirwe make ariko rigakomeza cyane mubucuruzi buciriritse kandi buciriritse.

Ni izihe ntambwe zihuse abashoramari bagomba gufata kugirango bagabanye ubu bugizi bwa nabi?

Kugabanya ingaruka nziza bisaba uburyo butandukanye bukemura ibibazo byugarije ako kanya ndetse n’umutekano wihishe inyuma y’umutekano utuma imikoreshereze ishoboka:

1. Koresha ibishishwa ako kanya: Menya neza ko sisitemu zose za Windows zifite amakuru yumutekano agezweho yashyizweho. Shyira imbere impera zikoreshwa nabakozi bakora itumanaho ryo hanze na dosiye.
2. Kugenzura igenamiterere rya dosiye:
3. Shimangira amahirwe make: Kuraho uburenganzira bwabayobozi baho kuri konti zisanzwe zabakoresha. Nubwo RCE yagerwaho, uburenganzira buke bwabakoresha bugabanya cyane ingaruka zabatera.
5. Amahugurwa yo kumenyekanisha abakoresha: Wigishe abakozi ko na dosiye zanditse zishobora kuba intwaro, bishimangira gushidikanya gukomeye kumadosiye adasabwe utitaye ku kwaguka.

Nigute uburyo bwubucuruzi bugezweho bushobora gufasha kugabanya ibitero byawe muri rusange?

Intege nke nka Windows Notepad RCE ishimangira ukuri kwimbitse: gucamo ibice, ibikoresho byumurage bitera umutekano muke. Porogaramu yinyongera ya desktop ikorera kumurimo wabakozi ni vector. Amashyirahamwe ahuza ibikorwa byubucuruzi kuri kijyambere, ibicu-kavukire bigabanya kwishingikiriza kuri porogaramu za Windows zashyizweho - kandi bikagabanya ubuso bwibitero byazo.

Ihuriro nka Mewayz , sisitemu yuzuye yubucuruzi 207-module yizewe nabakoresha barenga 138.000, ifasha amatsinda gucunga CRM, ibikorwa byumushinga, ibikorwa bya e-ubucuruzi, imiyoboro yibirimo, hamwe n’itumanaho ryabakiriya binyuze mumutekano, mushakisha. Iyo ibikorwa byingenzi byubucuruzi bibaye mubikorwa remezo bikomye aho kuba porogaramu ya Windows yashyizwe mu karere, ibyago biterwa nintege nke nka Notepad RCE bigabanuka cyane kubikorwa bya buri munsi.

Ibibazo bikunze kubazwa

Notepad ya Windows iracyafite intege nke niba mfite Windows Defender ishoboye?

Windows Defender itanga uburinzi bufatika bwo kwirinda imikono izwi, ariko ntabwo isimburwa. Niba intege nke ari zeru-umunsi cyangwa ikoresha shellcode itaramenyekana neza na signature ya Defender, kurinda amaherezo byonyine ntibishobora guhagarika ikoreshwa. Buri gihe shyira imbere gushyira mubikorwa umutekano wumutekano wa Microsoft nkigabanuka ryibanze, hamwe na Defender akora nk'urwego rwuzuzanya.

Ese iyi ntege nke igira ingaruka kuri verisiyo zose za Windows?

Imikorere yihariye iratandukanye na verisiyo ya Windows nurwego rwa patch. Windows 10 na Windows Server ibidukikije bidafite ivugurura rya vuba birashobora kuba byinshi. Windows 11 hamwe na Notepad yihariye ya AppContainer ifite mituweli yububiko, nubwo idakoreshwa kwisi yose. Seriveri yibanze ya sisitemu idashyiramo Notepad muburyo busanzwe yagabanije kugaragara. Buri gihe ugenzure Microsoft ishinzwe kuvugurura umutekano kugirango ubone verisiyo yihariye ya CVE.

Nabwirwa n'iki ko sisitemu yanjye yamaze guhungabana binyuze muri iyi ntege nke?

Ibipimo byubwumvikane birimo inzira zumwana zitunguranye zatewe na notepad.exe , imiyoboro idasanzwe yo hanze ituruka kumurongo wa Notepad, imirimo mishya iteganijwe cyangwa urufunguzo rwo kwandikisha rwakozwe mugihe cyose dosiye iteye inkeke, hamwe nibikorwa bya konte y'abakoresha bidasanzwe nyuma yo gufungura inyandiko. Ongera usubiremo ibyabaye kuri Windows, cyane cyane Umutekano hamwe na Porogaramu, hamwe na televiziyo ya EDR niba ihari.

Gukomeza imbere yintege nke bisaba kuba maso hamwe nibikorwa remezo bikwiye. Mewayz iha ubucuruzi bwawe umutekano, urubuga rugezweho rwo guhuza ibikorwa no kugabanya gushingira kubikoresho bya desktop yumurage - guhera kumadorari 19 / ukwezi. {"@ contexte": "https: \ / \ / schema.org", "@ ubwoko": "FAQPage", "mainEntity": [{ kurwanya imikono izwi, ariko ntabwo isimburwa no guterwa. Niba intege nke ari umunsi wa zeru cyangwa ikoresha shellcode itaramenyekana neza na signature ya Defender, kurinda iherezo ryonyine ntibishobora guhagarika imikoreshereze yumutekano wa Microsoft nkibisubizo byoroheje, "" Ubwoko ":" "Ubwoko:" Windows? "}, { ibikorwa bya konte yumukoresha ukurikira ibyabaye byo gufungura ibyabaye Gusubiramo Ibirango bya Windows, cyane cyane Umutekano n’ibisabwa, hamwe no kwambukiranya "}}]}