信息化建设与管理中心
Information construction and Management Center
  • 通知公告
    关于Windows远程桌面服务远程代码执行漏洞的预警通知
    时间:2019-05-27   浏览次数:

    关于Windows远程桌面服务远程代码执行漏洞的预警通知

    全校师生:

        接上级有关部门通知,2019515日,微软公布了5月的补丁更新列表,在其中存在一个被标记为严重的RDP(远程桌面服务)远程代码执行漏洞(cve-2019-0708),攻击者可以利用此漏洞,无需用户验证,在目标系统上执行恶意代码。专家研判认为,该漏洞威胁程度与永恒之蓝类似,可以蠕虫化利用,微软对该漏洞可能造成的危害评级很高,受影响的系统包括:Windows 7Window Server 2008Windows Server 2003Window XP

        为防止操作系统遭受恶意攻击,请各二级单位安排技术人员按照操作系统版本对应给电脑或服务器打上补丁(详见漏洞在线检测工具及官方补丁下载地址),加强信息系统安全防范。



    信息化建设与管理中心

    2019527


    附:

    漏洞在线检测工具及官方补丁下载地址

    一、漏洞检测工具

    https://free.360totalsecurity.com/CVE-2019-0708/detector_release.zip
    https://www.qianxin.com/other/CVE-2019-0708
    https://cloud.nsfocus.com/#/secwarning/secwarning_news?menu_id=urgent

    二、微软官方补丁下载地址

    操作系统版本

    补丁下载链接

    Windows 7 x86

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.1-kb4499175-x86_6f1319c32d5bc4caf2058ae8ff40789ab10bf41b.msu

    Windows 7 x64

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.1-kb4499175-x64_3704acfff45ddf163d8049683d5a3b75e49b58cb.msu

    Windows Embedded Standard 7 for x64

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.1-kb4499175-x64_3704acfff45ddf163d8049683d5a3b75e49b58cb.msu

    Windows Embedded Standard 7 for x86

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.1-kb4499175-x86_6f1319c32d5bc4caf2058ae8ff40789ab10bf41b.msu

    Windows Server 2008 x64

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.0-kb4499149-x64_9236b098f7cea864f7638e7d4b77aa8f81f70fd6.msu

    Windows Server 2008 Itanium

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.0-kb4499180-ia64_805e448d48ab8b1401377ab9845f39e1cae836d4.msu

    Windows Server 2008 x86

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.0-kb4499149-x86_832cf179b302b861c83f2a92acc5e2a152405377.msu

    Windows Server 2008 R2 Itanium

    http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/05/windows6.1-kb4499175-ia64_fabc8e54caa0d31a5abe8a0b347ab4a77aa98c36.msu

    Windows Server 2008 R2 x64

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/05/windows6.1-kb4499175-x64_3704acfff45ddf163d8049683d5a3b75e49b58cb.msu

    Windows Server 2003 x86

    http://download.windowsupdate.com/d/csa/csa/secu/2019/04/windowsserver2003-kb4500331-x86-custom-chs_4892823f525d9d532ed3ae36fc440338d2b46a72.exe

    Windows Server 2003 x64

    http://download.windowsupdate.com/d/csa/csa/secu/2019/04/windowsserver2003-kb4500331-x64-custom-chs_f2f949a9a764ff93ea13095a0aca1fc507320d3c.exe

    Windows XP SP3

    http://download.windowsupdate.com/c/csa/csa/secu/2019/04/windowsxp-kb4500331-x86-custom-chs_718543e86e06b08b568826ac13c05f967392238c.exe

    Windows XP SP2 for x64

    http://download.windowsupdate.com/d/csa/csa/secu/2019/04/windowsserver2003-kb4500331-x64-custom-enu_e2fd240c402134839cfa22227b11a5ec80ddafcf.exe

    Windows XP SP3 for XPe

    http://download.windowsupdate.com/d/csa/csa/secu/2019/04/windowsxp-kb4500331-x86-embedded-custom-chs_96da48aaa9d9bcfe6cd820f239db2fe96500bfae.exe

    WES09 and POSReady 2009

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/04/windowsxp-kb4500331-x86-embedded-chs_e3fceca22313ca5cdda811f49a606a6632b51c1c.exe

    办公室电话:0594-2692277 地址:紫霄校区图书馆一楼 电子邮箱:jszx@ptu.edu.cn                                                              闽公网安备 35030002001036号    闽ICP备0094036号