微軟警告兩個Windows零時差漏洞

微軟於3.23警告Windows一項元件冒出2個重大遠端程式碼執行（remote code execution，RCE）漏洞，並偵測到已經有駭客發動攻擊，但微軟需要數週的時間才能修補。

這2項漏洞發生在Windows內建的Adobe Type Manager Library (ATMFD.dll)元件中。Adobe Type Manager Library作用為，在Windows中顯示Adobe Type 1 PostScript字型（為Adobe和微軟共同開發的一種OpenType字型），漏洞則是處理經刻意改造的文字過程發生錯誤，造成攻擊者可在Windows裝置上執行程式碼。微軟指出，攻擊方法有很多種，像是誘使用戶開啟惡意文件，或利用Windows預覽窗格預覽時開採該漏洞。微軟已經觀察到有「少數精準攻擊行動」發生。
 
漏洞影響Windows 7、8.1、RT及所有版本Windows 10，以及Windows Server 2008、2012、2016與2019版。在所有平台上2項漏洞，皆被列為「重大」（critical）風險等級。但微軟強調，在Windows 10上，攻擊僅會導致程式碼以有限權限在AppContainer沙箱執行。
 
在釋出修補程式之前，微軟建議用戶關閉「檔案總管」中的預覽窗格及詳細內容窗格，可防止檔案總管顯示OpenType字型，或是關閉WebClient服務，以封鎖最有可能的遠端攻擊途徑，但使用WebClient的服務將無法啟用，電腦也暫時無法接收WebDAV呼叫。另一個方法是重新命名ATMFD.dll，但這也可能造成某些使用OpenType字型的應用程式無法運作。不過微軟指出，Windows 10 1709以後就沒有這個檔案了。
 
*****若有任何資安需求，歡迎洽詢ESET資安專業團隊，服務電話：(02)7722-6899，或上官網查詢：https://www.eset.tw/
 
 

 

ESET Foundation has supported development of a diagnostic PCR test to detect the coronavirus SARS-CoV-2, the cause of COVID-19.

BRATISLAVA, April 14, 2020 – Scientists from the Slovak companies MultiplexDX, Lambda Life and ProScience Tech have joined forces with virologists from the Biomedical Center of the Slovak Academy of Sciences (BMC SAV) to develop a reagent kit according to World Health Organization (WHO) protocols for reliable SARS-CoV-2 detection. In the first phase they plan to produce and make available 100,000 PCR tests. The ESET Foundation supported the development of the kit and will finance the first 100,000 tests to be offered as an in-kind gift to the Slovak Republic.

Key components have been brought to the project by MultiplexDX, a company dedicated to developing and manufacturing various innovative molecular diagnostic reagents. The Slovak PCR test is currently being validated in cooperation with a team of scientists from the BMC SAV. Preliminary results of the new test not only show nominal functionality, but also good sensitivity compared to currently used diagnostics. “This means that our test is reliable and accurate and can help diagnose early stage patients. We can produce key components for 100,000 PCR tests within two weeks,” explained Pavol Čekan, founder of MultiplexDX.

“In the process of validation and subsequent registration of the resulting report, we are cooperating with the non-profit organization CCCT SK. This stage is estimated to take about three weeks,” said Adam Andráško of ProScience Tech.

“Virus detection consists of sample collection, RNA isolation and PCR diagnostics, with our joint efforts focused on the last step,” said Ivan Juráš of Lambda Life.

“I believe that the efforts of our scientists will be crowned with success, and that we will have sufficient PCR tests from our own resources for the task at hand, coronavirus detection. This will not only help Slovakia by providing much-needed testing, but will also create a reserve in case there is a shortage of tests globally,” noted Robert Mistrík from the permanent crisis staff.

The ESET Foundation supported the development of the test and provided funding for the first 100,000 units from its fund to support the effective diagnosis and prevention of COVID-19. These tests will be offered as a gift to Slovak state institutions. “When creating the fund, it was important for us to ensure effective mass-scale diagnostics, which can only be achieved through scientific cooperation. Such a critical situation reveals the importance of supporting science in Slovakia, which the ESET Foundation has been dedicated to for a long time,” said Richard Marko, CEO of ESET.

Production capacity, including the first 100,000 tests, will be available primarily to diagnostic laboratories on the Slovak market. “We are ready to cooperate with state laboratories, flexibly responding to their needs and supplying them efficiently. After satisfying the needs of Slovak laboratories, we can then direct our capacities to other countries that may need our products,” explained the authors of the test.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.