1. IT-Security >
  2. Hacking >
  3. The May 2020 Security Update Review

ArabicEnglishFrenchGermanGreekItalianJapaneseKoreanPersianPolishPortugueseRussianSpanishTurkishVietnamese

The May 2020 Security Update Review


Hacking vom | Direktlink: thezdi.com Nachrichten Bewertung

May is upon us, and with it brings another bumper crop of security patches from Adobe and Microsoft. Take a break from your regularly scheduled activities and join us as we review the details for security patches for this month.

Adobe Patches for May 2020

The Adobe updates for May are just two patches covering 36 CVEs. Two of these CVEs were reported through the ZDI program. The patch for Adobe Acrobat and Reader covers 24 Critical and Important-rated CVEs that mostly consist of Out-of-Bounds (OOB) Reads and Writes. There are also some buffer overflows, memory corruptions, stack exhaustion, and Use-After-Free (UAF) bugs fixed. The patch for the Adobe DNG Software Development Kit (SDK) fixes four Critical-rated heap overflows and eight Important-rated OOB Reads. The overflows could lead to code execution, so if you use the DNG format for your digital photography, definitely make sure you are patched. None of these bugs are listed as publicly known or under active attack at the time of release.

Microsoft Patches for May 2020

For May, Microsoft released patches for 111 CVEs covering Microsoft Windows, Microsoft Edge (EdgeHTML-based), ChakraCore, Internet Explorer, Microsoft Office, and Microsoft Office Services and Web Apps, Visual Studio, Microsoft Dynamics, .NET Framework, .NET Core, and Power BI. Of these 111 CVEs, 16 are rated Critical and 95 are rated Important in severity. Eleven of these CVEs were reported through the ZDI program. None of the bugs being patched are listed as being publicly known or under active attack at the time of release. That makes three months in a row that Microsoft has released patches for more than 110 CVEs. We’ll see if they maintain that pace throughout the year.

Let’s take a closer look at some of the more interesting updates for this month, starting with a bug that requires physical access:

-       CVE-2020-1071 – Windows Remote Access Common Dialog Elevation of Privilege Vulnerability
Law #3 of the 10 Immutable Laws of Security states, “If a bad guy has unrestricted physical access to your computer, it’s not your computer anymore.” But what if the physical access is something other than unrestricted? That seems to be the case here. An attacker would need to be at the system and boot it to the login screen. If they can do that, they could leverage a bug in the Remote Access Common Dialog to run arbitrary code with elevated privileges. This bug will be much more critical for places with open offices where casual physical access is common.

 -       CVE-2020-1135 - Windows Graphics Component Elevation of Privilege Vulnerability
While Pwn2Own may have been virtual this year, the bugs demonstrated certainly were not. This bug from the Fluoroacetate duo of Richard Zhu and Amat Cama allows a logged-on user to take over a system by running a specially crafted program. They leveraged a Use-After-Free (UAF) bug in Windows to escalate from a regular user to SYSTEM.

-       CVE-2020-1067 - Windows Remote Code Execution Vulnerability
This patch corrects an RCE bug in the Windows OS that could allow an attacker to execute arbitrary code with elevated permissions on affected systems. The only thing keeping this from being Critical is the fact that the attacker needs a domain user account for their specially crafted request to succeed. This makes the bug a prime target for insider threats, as well as penetration testers looking to expand their foothold in a target enterprise.

-       CVE-2020-1118 - Microsoft Windows Transport Layer Security Denial of Service Vulnerability
This patch addresses a bug that allows a remote, unauthenticated attacker to abnormally reboot, resulting in a denial-of-service condition. A NULL pointer dereference vulnerability exists in the Windows implementation of the Diffie-Hellman protocol. An attacker can exploit this vulnerability by sending a malicious Client Key Exchange message during a TLS handshake. The vulnerability affects both TLS clients and TLS servers, so just about any system could be shut down by an attacker. Either way, successful exploitation will cause the lsass.exe process to terminate.

 Here’s the full list of CVEs released by Microsoft for May 2020.


Externe Webseite mit kompletten Inhalt öffnen



https://www.thezdi.com/blog/2020/5/12/the-may-2020-security-update-review

Team Security Social Media

➤ Weitere Beiträge von Team Security | IT Sicherheit

  • The May 2020 Security Update Review

    vom 409.54 Punkte ic_school_black_18dp
    May is upon us, and with it brings another bumper crop of security patches from Adobe and Microsoft. Take a break from your regularly scheduled activities and join us as we review the details for security patches for this month.Adobe Patches for May 2020The Adobe updat
  • The March 2020 Security Update Review

    vom 407.35 Punkte ic_school_black_18dp
    March is upon us, and it brings a bumper crop of security patches from Adobe and Microsoft. Take a break from your regularly scheduled activities and join us as we review the details for security patches for this month.Adobe Patches for March 2020Oddly, Adobe
  • The June 2020 Security Update Review

    vom 404.3 Punkte ic_school_black_18dp
    June is here, and it brings with it a record number of security patches from Microsoft, and a few from Adobe as well. Take a break from your regularly scheduled activities and join us as we review the details for security patches for this month.Adobe
  • The April 2020 Security Update Review

    vom 403.25 Punkte ic_school_black_18dp
    April is here, and it brings another cornucopia of security patches from Adobe and Microsoft. Take a break from your regularly scheduled activities and join us as we review the details for security patches for this month.Adobe Patches for April 2020For April, Ad
  • The February 2020 Security Update Review

    vom 395.52 Punkte ic_school_black_18dp
    February is here, and with it comes some significant security patches from Adobe and Microsoft. Take a break from your regularly scheduled activities and join us as we review the details for security patches for this month. Adobe Patches for February 2020The Adobe
  • CentOS Blog: CentOS Community newsletter, June 2020 (#2006)

    vom 347.06 Punkte ic_school_black_18dp
    Dear CentOS enthusiast, We hope you are all doing well and staying healthy, and, as always, thank you for being part of this great community. In this edition: News Releases and updates Events SIG reports News User Survey Over the past month we have been conducting
  • Movierulz 2020 | Download Watch Telugu Bollywood and Hollywood Full Movies Online Free

    vom 290.13 Punkte ic_school_black_18dp
    Movierulz - Download watch latest Bollywood Hollywood Hindi English Telugu Tamil Malayalam Dubbed Kannada Marathi Punjabi movies online free movierulz torrent8Movierulz.ws- Download Watch Telugu Bollywood and Hollywood Full Movies Online FreeThe torre
  • CentOS Blog: CentOS Community newsletter, April 2020 (#2004)

    vom 282.74 Punkte ic_school_black_18dp
    Dear CentOS enthusiast, I hope you are all well. I know that this is a very difficult time for all of you, and that you likely have other things on your mind than CentOS, so I'll try to make it interesting this month. In this edition: News Releases and updates Event
  • CentOS Blog: CentOS Community newsletter, July 2020 (#2007)

    vom 240.72 Punkte ic_school_black_18dp
    Dear CentOS enthusiasts, Thanks for coming back for another edition of the CentOS community newsletter. News 8.2.2004 release We are pleased to announce the general availability of CentOS Linux 8.2.2004. Effectively immediately, this is the current re
  • The January 2020 Security Update Review

    vom 227.58 Punkte ic_school_black_18dp
    Welcome to the new year, and welcome to the first Patch Tuesday of 2020. Take a break from your regularly scheduled activities and join us as we review the details for security patches for this month. Adobe Patches for January 2020Adobe begins the ye
  • CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

    vom 223.05 Punkte ic_school_black_18dp
    Dear CentOS enthusiast, For the past several months, the focus has been on FOSDEM, as usual this time of year. Now that FOSDEM is behind us, it's time to turn our attention to the upcoming Dojo at Facebook, and Red Hat Summit. We'd love to see you at one of thes
  • CentOS Blog: CentOS Community newsletter, February 2020 (#2002)

    vom 171.88 Punkte ic_school_black_18dp
    Dear CentOS enthusiast, After a slowdown over the past few months, the year is off to a busy start. I'm getting the newsletter out a little later than usual, due to having spent last week in Brussels, at FOSDEM. More about this below. Special thanks go to Ama

Team Security Diskussion über The May 2020 Security Update Review






CVE Title Severity Public Exploited Latest Software Release Older Software Release Type
CVE-2020-1037 Chakra Scripting Engine Memory Corruption Vulnerability Critical No No 2 2 RCE
CVE-2020-1062 Internet Explorer Memory Corruption Vulnerability Critical No No 1 1 RCE
CVE-2020-1028 Media Foundation Memory Corruption Vulnerability Critical No No 2 2 RCE
CVE-2020-1126 Media Foundation Memory Corruption Vulnerability Critical No No 2 2 RCE
CVE-2020-1136 Media Foundation Memory Corruption Vulnerability Critical No No 2 2 RCE
CVE-2020-1117 Microsoft Color Management Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1056 Microsoft Edge Elevation of Privilege Vulnerability Critical No No 2 2 EoP
CVE-2020-1153 Microsoft Graphics Components Remote Code Execution Vulnerability Critical No No 2 1 RCE
CVE-2020-1023 Microsoft SharePoint Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1024 Microsoft SharePoint Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1102 Microsoft SharePoint Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1069 Microsoft SharePoint Server Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1064 MSHTML Engine Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1065 Scripting Engine Memory Corruption Vulnerability Critical No No 2 2 RCE
CVE-2020-1093 VBScript Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1192 Visual Studio Code Python Extension Remote Code Execution Vulnerability Critical No No 2 2 RCE
CVE-2020-1108 .NET Core Denial of Service Vulnerability Important No No 2 2 DoS
CVE-2020-1066 .NET Framework Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1161 ASP.NET Core Denial of Service Vulnerability Important No No 2 2 DoS
CVE-2020-1084 Connected User Experiences and Telemetry Service Denial of Service Vulnerability Important No No 2 2 DoS
CVE-2020-1123 Connected User Experiences and Telemetry Service Denial of Service Vulnerability Important No No 2 2 DoS
CVE-2020-1140 DirectX Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1092 Internet Explorer Memory Corruption Vulnerability Important No No 2 2 RCE
CVE-2020-1051 Jet Database Engine Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1174 Jet Database Engine Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1175 Jet Database Engine Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1176 Jet Database Engine Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1150 Media Foundation Memory Corruption Vulnerability Important No No 2 2 RCE
CVE-2020-1055 Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability Important No No 2 2 XSS
CVE-2020-1063 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability Important No No 2 2 XSS
CVE-2020-1096 Microsoft Edge PDF Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1059 Microsoft Edge Spoofing Vulnerability Important No No 2 2 Spoof
CVE-2020-0901 Microsoft Excel Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1099 Microsoft Office SharePoint XSS Vulnerability Important No No 2 2 XSS
CVE-2020-1100 Microsoft Office SharePoint XSS Vulnerability Important No No 2 2 XSS
CVE-2020-1101 Microsoft Office SharePoint XSS Vulnerability Important No No 2 2 XSS
CVE-2020-1106 Microsoft Office SharePoint XSS Vulnerability Important No No 2 2 XSS
CVE-2020-1173 Microsoft Power BI Report Server Spoofing Vulnerability Important No No 2 2 Spoof
CVE-2020-1061 Microsoft Script Runtime Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1103 Microsoft SharePoint Information Disclosure Vulnerability Important No No 2 2 Info
CVE-2020-1104 Microsoft SharePoint Spoofing Vulnerability Important No No 2 2 Spoof
CVE-2020-1105 Microsoft SharePoint Spoofing Vulnerability Important No No 2 2 Spoof
CVE-2020-1107 Microsoft SharePoint Spoofing Vulnerability Important No No 2 2 Spoof
CVE-2020-1010 Microsoft Windows Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1068 Microsoft Windows Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1079 Microsoft Windows Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1118 Microsoft Windows Transport Layer Security Denial of Service Vulnerability Important No No 2 2 DoS
CVE-2020-1035 VBScript Remote Code Execution Vulnerability Important No No 1 1 RCE
CVE-2020-1058 VBScript Remote Code Execution Vulnerability Important No No 1 1 RCE
CVE-2020-1060 VBScript Remote Code Execution Vulnerability Important No No 1 1 RCE
CVE-2020-1171 Visual Studio Code Python Extension Remote Code Execution Vulnerability Important No No 2 2 RCE
CVE-2020-1054 Win32k Elevation of Privilege Vulnerability Important No No 1 1 EoP
CVE-2020-1143 Win32k Elevation of Privilege Vulnerability Important No No 1 1 EoP
CVE-2020-1112 Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1111 Windows Clipboard Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1121 Windows Clipboard Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1165 Windows Clipboard Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1166 Windows Clipboard Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1154 Windows Common Log File System Driver Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1116 Windows CSRSS Information Disclosure Vulnerability Important No No 2 2 Info
CVE-2020-1076 Windows Denial of Service Vulnerability Important No No 2 2 DoS
CVE-2020-1021 Windows Error Reporting Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1082 Windows Error Reporting Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1088 Windows Error Reporting Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1132 Windows Error Reporting Manager Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1142 Windows GDI Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-0963 Windows GDI Information Disclosure Vulnerability Important No No 2 2 Info
CVE-2020-1141 Windows GDI Information Disclosure Vulnerability Important No No 2 2 Info
CVE-2020-1145 Windows GDI Information Disclosure Vulnerability Important No No 2 2 Info
CVE-2020-1179 Windows GDI Information Disclosure Vulnerability Important No No 2 2 Info
CVE-2020-1135 Windows Graphics Component Elevation of Privilege Vulnerability Important No No 1 1 EoP
CVE-2020-0909 Windows Hyper-V Denial of Service Vulnerability Important No No 2 2 DoS
CVE-2020-1078 Windows Installer Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1087 Windows Kernel Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1114 Windows Kernel Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1072 Windows Kernel Information Disclosure Vulnerability Important No No 2 2 Info
CVE-2020-1048 Windows Print Spooler Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1070 Windows Print Spooler Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1081 Windows Printer Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1137 Windows Push Notification Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1071 Windows Remote Access Common Dialog Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1067 Windows Remote Code Execution Vulnerability Important No No 2 2 EoP
CVE-2020-1077 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1086 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1090 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1125 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1139 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1149 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1151 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1155 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1156 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1157 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1158 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1164 Windows Runtime Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1124 Windows State Repository Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1131 Windows State Repository Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1134 Windows State Repository Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1144 Windows State Repository Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1184 Windows State Repository Service Elevation of Privilege Vulnerability Important No No 2 2 EoP
CVE-2020-1185 Windows State Repository Service Elevation of Privilege Vulnerability Important No No 2 2