IT天空

 找回密码
 加入我们

手机号码,快捷登录

搜索

[求助] CVE-2020-1457/1425:Microsoft Windows 编解码器库远程执行代码...

[复制链接]
gmboss 发表于 2020-7-3 08:37:58 | 显示全部楼层 |阅读模式

IT天空 定制版高速U盘 64G/128G/256G | 固态U盘 256G Pro/512G Pro
求这两个补丁的下载网址,我在网上没找到
 楼主| gmboss 发表于 2020-7-3 09:09:12 | 显示全部楼层

活跃 1363| 技术 0| 互助 3| 钻石 0

Is Windows vulnerable in the default configuration?

No. Only customers who have installed the optional HEVC or "HEVC from Device Manufacturer" media codecs from Microsoft Store may be vulnerable.

How do I get the updated Windows Media Codec?

Affected customers will be automatically updated by Microsoft Store. Customers do not need to take any action to receive the update.

Alternatively, customers who want to receive the update immediately can check for updates with the Microsoft Store App; more information on this process can be found here.

Why are these security updates offered to affected clients via the Microsoft Store and not Windows Update?

These updates are for optional apps/components that are offered to customers as a download via the Microsoft Store. Updates for optional store apps/components are provided via the Microsoft Store.

My server is in a disconnected environment, is it vulnerable?

HEVC is not available for offline distribution and not supported on Windows Server. Users should not have it installed in these environments. Enterprise customers using Store for Business will receive the update in the same manner as consumer Store.

Why are these updates being offered outside of Update Tuesday?

Servicing for store apps/components does not follow the monthly “Update Tuesday” cadence, but are offered whenever necessary.

Are these updates for Microsoft store apps/components offered automatically when an affected component is on the system?

Yes. However, it is possible to turn off automatic updating for store apps. In that scenario, these updates would not be installed automatically.

How does a user know if the update has been installed?

You can check the version of the installed package. For example, click on Settings, Apps & Features and slect HEVC, Advanced Options. You will see the version there. The secure versions are 1.0.31822.0, 1.0.31823.0 and later.

How can I check from PowerShell if the update is installed?

The following command will display the version of the installed package: > Get-AppxPackage -Name Microsoft.HEVCVideoExtension
y283146775 发表于 2020-7-3 18:45:13 | 显示全部楼层

活跃 4852| 技术 0| 互助 2| 钻石 0

通用修补建议:
用户可以通过Microsoft Store App自行检查更新,详细信息可以参考:Get updates for apps and games in Microsoft Store
https://support.microsoft.com/en ... -for-apps-and-games

点评

已查阅,感谢关注。  详情 回复 发表于 2020-7-6 09:09
 楼主| gmboss 发表于 2020-7-6 09:09:53 | 显示全部楼层

活跃 1363| 技术 0| 互助 3| 钻石 0

y283146775 发表于 2020-7-3 18:45
通用修补建议:
用户可以通过Microsoft Store App自行检查更新,详细信息可以参考:Get updates for apps  ...

已查阅,感谢关注。
您需要登录后才可以回帖 登录 | 加入我们

本版积分规则

gmboss

1363

活跃

0

技术

3

互助
签到任务
最火的业界新闻
  • 小米10至尊纪念版发布 售价5299元起
  • 小米“黑灯工厂”曝光:全自动化生产 一年
  • 世界第一台量产的透明电视:小米透明电视售
  • 重回1999元 Redmi K30至尊纪念版发布:红米
  • Redmi路由器AX6正式发布:3000兆Wi-Fi 6、
  • 120W有线、50W无线秒充:小米10至尊纪念版4
  • 16GB内存、120W秒充、120Hz屏 小米10至尊纪
  • 小米10至尊纪念版DxOMark成绩公布:130分勇
  • 雷军公布小米手机9年来销量:从27万台一路
  • 急缺芯片的华为如何应对?与高通5G专利授权
炫酷的硬件Show
  • 振华SUPER FLOWER 铜皇450W 铜牌电源
  • 比小更小,Mini-STX装机
  • 华擎X99E-ITX + 银欣ML06 装机记
  • 最强双路泰坦硬管水冷 制作流程
  • 银欣FT02,双路E5工作站
  • 迟到的定制机箱小钢炮清理灰尘
  • 乔思伯UMX1 Plus,小巧的家用综合主机
  • 分体水冷第二弹-Inwin 805 infinity
  • 第一次DIY硬管水冷~~
  • 樱桃MX6.0 青轴 机械键盘 开箱
有趣的美图分享
  • 睡的好香啊
  • 渲染世界的显卡
  • 品尝12款大白兔后感
  • 社畜还社畜还标准成语
  • 从好的角度看,这镜片也可以防弹了
  • 还能再软萌点吗?
  • 有个网友忘记带手机出门,结果回来发现手机
  • 俄罗斯勒热夫战役纪念雕塑,概念图与实景图
  • 小白鞋
  • 女神伊织萌代言的电竞椅广告图
关注官方微信
快速回复 返回顶部 返回列表