瑞星卡卡安全论坛

首页 » 技术交流区 » 系统软件 » 10月22日微软紧急发布Windows安全更新(KB958644)
天下奇才 - 2008-10-24 8:47:00
微软爆出特大安全漏洞,会引发大面积远程攻击甚至完全控制,危害程度跟"冲击波"类似,强烈建议各网友下载此补丁.
现已确认存在一个安全问题,通过了身份验证的远程攻击者可能会利用此问题危及基于 Microsoft Windows 的系统的安全并获取对该系统的控制权。

Operating SystemMaximum Security ImpactAggregate Severity RatingBulletins Replaced by this Update
Microsoft Windows 2000 Service Pack 4
Remote Code Execution
Critical
MS06-040
Windows XP Service Pack 2
Remote Code Execution
Critical
MS06-040
Windows XP Service Pack 3
Remote Code Execution
Critical
None
Windows XP Professional x64 Edition
Remote Code Execution
Critical
MS06-040
Windows XP Professional x64 Edition Service Pack 2
Remote Code Execution
Critical
None
Windows Server 2003 Service Pack 1
Remote Code Execution
Critical
MS06-040
Windows Server 2003 Service Pack 2
Remote Code Execution
Critical
None
Windows Server 2003 x64 Edition
Remote Code Execution
Critical
MS06-040
Windows Server 2003 x64 Edition Service Pack 2
Remote Code Execution
Critical
None
Windows Server 2003 with SP1 for Itanium-based Systems
Remote Code Execution
Critical
MS06-040
Windows Server 2003 with SP2 for Itanium-based Systems
Remote Code Execution
Critical
None
Windows Vista and Windows Vista Service Pack 1
Remote Code Execution
Important
None
Windows Vista x64 Edition and Windows Vista x64 Edition Service Pack 1
Remote Code Execution
Important
None
Windows Server 2008 for 32-bit Systems*
Remote Code Execution
Important
None
Windows Server 2008 for x64-based Systems*
Remote Code Execution
Important
None
Windows Server 2008 for Itanium-based Systems
Remote Code Execution
Important
None



downloads:
http://www.microsoft.com/downloads/details.aspx?displaylang=zh-cn&FamilyID=0d5f9b6e-9265-44b9-a376-2067b73d6a03#QuickInfoContainer

用户系统信息:Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)
yaya200054 - 2008-10-24 9:13:00
楼主提供的很及时,收藏。
yujiqi - 2008-10-24 9:32:00
谢谢楼主及时提供已经下载并安装上了:default7: :default7:
艾玛 - 2008-10-24 10:10:00
现已确认存在一个安全问题,未通过身份验证的远程攻击者可能会利用此问题危及基于 Microsoft Windows 的系统的安全并获取对该系统的控制权。


安全公告:http://www.microsoft.com/technet/security/bulletin/MS08-067.mspx

知识库:http://support.microsoft.com/kb/958644

涉及系统:

• Windows Server 2008 Datacenter without Hyper-V
• Windows Server 2008 Enterprise without Hyper-V
• Windows Server 2008 for Itanium-Based Systems
• Windows Server 2008 Standard without Hyper-V
• Windows Server 2008 Datacenter
• Windows Server 2008 Enterprise
• Windows Server 2008 Standard
• Windows Web Server 2008
• Windows Vista Service Pack 1, when used with:
  Windows Vista Business
  Windows Vista Enterprise
  Windows Vista Home Basic
  Windows Vista Home Premium
  Windows Vista Starter
  Windows Vista Ultimate
  Windows Vista Enterprise 64-bit Edition
  Windows Vista Home Basic 64-bit Edition
  Windows Vista Home Premium 64-bit Edition
  Windows Vista Ultimate 64-bit Edition
  Windows Vista Business 64-bit Edition

• Microsoft Windows Server 2003 Service Pack 1, when used with:
  Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  Microsoft Windows Server 2003, Web Edition
  Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

• Microsoft Windows Server 2003, Datacenter x64 Edition
• Microsoft Windows Server 2003, Enterprise x64 Edition
• Microsoft Windows Server 2003, Standard x64 Edition
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows Server 2003 Service Pack 2, when used with:
  Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  Microsoft Windows Server 2003, Web Edition
  Microsoft Windows Server 2003, Datacenter x64 Edition
  Microsoft Windows Server 2003, Enterprise x64 Edition
  Microsoft Windows Server 2003, Standard x64 Edition
  Microsoft Windows XP Professional x64 Edition
  Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

• Microsoft Windows XP Service Pack 2, when used with:
  Microsoft Windows XP Home Edition
  Microsoft Windows XP Professional

• Microsoft Windows XP Service Pack 3, when used with:
  Microsoft Windows XP Home Edition
  Microsoft Windows XP Professional

• Microsoft Windows 2000 Service Pack 4, when used with:
  Microsoft Windows 2000 Advanced Server
  Microsoft Windows 2000 Datacenter Server
  Microsoft Windows 2000 Professional Edition
  Microsoft Windows 2000 Server




涉及文件:    Netapi32.dll--->  Net Win32 API DLL
                      Wnetapi32.dll
朗州司马 - 2008-10-28 18:32:00
:default6: 安装了 是不是就不怕了
神州浪子 - 2008-10-30 21:31:00
下载了这个补丁后会黑屏吗?
听说黑屏太可怕了。
凡尘之沙 - 2008-11-5 21:57:00
我看还是先安装了在说  补了会好点的
forg王子 - 2008-12-4 15:54:00
我的系统用漏洞扫描,没有漏洞,还用安装这个吗?
光的影子203 - 2009-7-2 12:20:00
:kaka4: 我单位的服务器中招了。就是没有windows server2003 Enterprise Edition版本的KB958644补丁。客户端已经解决了。因为是2000的。可服务器没这个补丁。。。windows server2003 Enterprise Edition版本的KB958644:kaka4:
光的影子203 - 2009-7-2 12:22:00
楼主有的话说一下哦。。谢谢!了。。我急啊。。。
KB958644补丁 - 2009-7-31 16:47:00
楼上的朋友 不知道你的问题解决了没,我也遇到相同的问题,但是无法解决,要是解决了告诉我一声 还honeys1983@163.com我邮箱
1
查看完整版本: 10月22日微软紧急发布Windows安全更新(KB958644)