360CERT - 每日安全简报 (2020-03-08)

<<Previous Next>>

漏洞 Vulnerability

CVE-2020-3843：通过无线远程传输内存，导致远程iOS / MacOS内核堆损坏

https://bugs.chromium.org/p/project-zero/issues/detail?id=1982

由于EAP数据包处理中的缺陷，pppd（点对点协议守护程序）容易出现缓冲区溢出

https://www.kb.cert.org/vuls/id/782301/

恶意软件 Malware

对Emotet木马的深入分析

https://www.cynet.com/blog/emotet-vs-trump-deep-dive-analysis-of-a-killer-info-stealer/

安全研究 Security Research

CVE-2020-0688：Microsoft Exchange Control Panel RCE在野利用手法分析

https://www.volexity.com/blog/2020/03/06/microsoft-exchange-control-panel-ecp-vulnerability-cve-2020-0688-exploited/

chrome Issue 744584：v8 RCE漏洞分析及利用

https://zon8.re/posts/exploiting-an-accidentally-discovered-v8-rce/

CVE-2019-1436:win32k 信息泄漏漏洞与利用 IDAPython 脚本自动化检测

https://versprite.com/blog/security-research/how-to-use-idapython-to-automate-reverse-engineering/

jameel_nabbo有关安全代码审计而构建静态代码分析器的研究论文

https://www.researchgate.net/publication/339601996_Scientific_research_for_building_static_code_analyzers_-_Jameel_Nabbo

ManageEngine桌面中央文件存储未授权RCE漏洞poc公开

https://srcincite.io/pocs/src-2020-0011.py.txt

安全工具 Security Tools

projectsandcastle：可以让iphone运行Android和Linux程序的工具

https://github.com/corellium/projectsandcastle

SharpRDP：对用于身份验证的命令执行漏洞的远程桌面协议.NET控制台应用程序

https://www.kitploit.com/2020/03/sharprdp-remote-desktop-protocol-net.html

<<Previous Next>>