CVE-2020-1350

CVE-2020-1350

描述

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

影响版本

Product	CPU Architecture	Version	Update	Tested
Windows Server 2008	x86/x64	R2	SP1
Windows Server 2008	x86/x64		SP2
Windows Server 2012		R2
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server		1903
Windows Server		1909
Windows Server		2004

修复补丁

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350

利用方式

该漏洞并未进行测试，根目录留存着网络收集**[CVE编号].zip**的EXP或者POC，代码状态未知

项目来源

• tinkersec

分析文章

• https://saturn35.com/2020/07/24/20200724-1/
• https://www.anquanke.com/post/id/210812
• https://cert.360.cn/report/detail?id=5b7082dae4756f361d43a5efde233ed