切片 切片 切片 切片 切片 切片 切片 切片 切片 切片 切片 编组 3 切片 切片 路径 2 download 工具 配置对比 手册 切片 切片
Dolby Audio X2(DAX2)越权漏洞
Y系列2018-03-12知识编号:151405
催更新

故障现象:

Lenovo 安全公告:LEN-4884


潜在影响:本地越权漏洞


严重性


摘要:已发现 Dolby Audio X2(DAX2)软件实用程序的文件权限存在一个漏洞,通过该漏洞,本地用户可以利用系统级别权限运行文件。


描述:


Dolby Audio X2(DAX2)是 Dolby Laboratories 为众多供应商开发的行业标准软件程序,利用该软件,用户可以优化其系统的音频系能。某些预装了 Windows 10 操作系统的 Lenovo 系统中包含此程序。


已发现 Dolby DAX2 应用程序编程接口(API)的文件权限存在漏洞,通过该漏洞,本地用户可以利用系统级别权限运行文件。


解决方案:

应采取哪些措施进行自我保护:


Lenovo 正与 Dolby 协作,以推出此驱动程序的更新版本,其中将包含针对此漏洞的修复程序。对于担心此问题的客户,Lenovo 已经发布了批处理文件,该文件可修复针对 Windows Dolby 驱动程序文件的不安全权限。通过以管理员身份运行该批处理文件,Dolby Audio X2 驱动程序将不再会受到此问题的影响。可在此处获取该批处理文件。


此外,用户还可从以下目录中删除对“已认证的用户”组的访问权限,从而手动删除存在漏洞的文件权限。


对于 32 位 Windows:C:Program Files (x86)DolbyDolby DAX2DAX2_API


对于 64 位 Windows:C:Program FilesDolbyDolby DAX2DAX2_API


要执行上述操作,请右键单击上面列出的文件夹,然后在 DAX2_API 的目录中选择“文件属性”->“安全”对话框,或者在管理员命令提示符窗口中运行以下命令:


对于 32 位 Windows:icacls "C:Program Files (x86)DolbyDolby DAX2DAX2_API" /remove "Authenticated Users"


对于 64 位 Windows:icacls "C:Program FilesDolbyDolby DAX2DAX2_API" /remove "Authenticated Users"


产品影响:


IdeaPad


产品 最低修复程序版本 链接
Edge 2-1580 6.0.1.7756 https://support.lenovo.com/downloads/DS104700
Flex3-1480  (SKL)/Flex3-1580  (SKL) 6.0.1.7756 https://support.lenovo.com/downloads/DS104700
IdeaPad 500-14 ISK Non JBL/IdeaPad 500-14 ISK  JBL/IdeaPad 500-15 ISK Non JBL/IdeaPad 500-15 ISK  JBL/ IdeaPad 500-15 ISK Non JBL 3D/IdeaPad 500-15 ISK JBL 3D/ 6.0.1.7756 https://support.lenovo.com/downloads/DS104724
IdeaPad 500-15 ISK  JBL 6.0.1.7756 https://support.lenovo.com/downloads/DS104724
Ideapad 500S-13ISK 6.0.1.7624 https://support.lenovo.com/downloads/DS105034
Ideapad 500S-14ISK 6.0.1.7756 https://support.lenovo.com/downloads/DS104700
ideapad 500S-15ISK 6.0.1.7647 https://support.lenovo.com.cn/lenovo/wsi/Modules/IdeaPad500s-15ISK
ideapad 700-15 ISK/ideapad 700-17 ISK 6.0.1.7801 https://support.lenovo.com/downloads/DS111733
IdeaPad Erazer 500-14 ISK  JBL 6.0.1.7756 https://support.lenovo.com/downloads/DS104724
IdeaPad Erazer 500-14 ISK Non JBL 6.0.1.7756 https://support.lenovo.com/downloads/DS104724
Lenovo Ideapad 700-15ISK JBL 6.0.1.7801 https://support.lenovo.com/downloads/DS111733
Lenovo Ideapad 700-15ISK Non- JBL 6.0.1.7801 https://support.lenovo.com/downloads/DS111733
Lenovo Ideapad 700-17ISK JBL 6.0.1.7801 https://support.lenovo.com/downloads/DS111733
Lenovo XiaoXin 700-15ISK 6.0.1.7714 https://support.lenovo.com.cn/lenovo/wsi/Modules/LenovoXiaoXin700-15ISK
Lenovo Yoga 500-14ISK 6.0.1.7756 https://support.lenovo.com/downloads/DS104700
Lenovo Yoga 500-15ISK 6.0.1.7756 https://support.lenovo.com/downloads/DS104700
M51-80 6.0.1.7647 https://support.lenovo.com.cn/lenovo/wsi/Modules/IdeaPad500s-15ISK
Y700-14 ISK 6.0.1.7756 https://support.lenovo.com/downloads/DS105282
Y700-15 ACZ 6.0.1.7767 https://support.lenovo.com/downloads/DS105657
Y700-15 ISK/Y700-17 ISK/Y700-15 ISK 3D/Y700-15 ISK Touch 6.0.1.7786_W... https://support.lenovo.com/downloads/DS105105
Y900-17ISK/Y900-17ISK 3D Camera 6.0.1.7767 https://support.lenovo.com/downloads/DS113306
Yoga 700-11ISK 6.0.1.7756_F... https://support.lenovo.com/downloads/DS105063
Yoga 700-14ISK 8.66.29.52 https://support.lenovo.com/downloads/DS104869
Yoga 900-13ISK 6.0.1.7756_W... https://support.lenovo.com/downloads/DS105076
Yoga 900-13ISK for Business 6.0.1.7756_W... https://support.lenovo.com/downloads/DS105076
Yoga 900S-12ISK 6.0.1.7756 https://support.lenovo.com/downloads/DS112688


ThinkCentre


Product Minimum Fix Version Link
ThinkCentre X1 6.0.1.7743 https://support.lenovo.com/downloads/DS112068


ThinkPad


Product Minimum Fix Version Link
ThinkPad 13e 0.6.3.44 https://support.lenovo.com/downloads/DS112489
ThinkPad E460/E560 0.6.3.44 https://support.lenovo.com/downloads/DS105337
ThinkPad E465/E565 0.6.3.44 https://support.lenovo.com/downloads/DS105337 
ThinkPad L460 0.6.3.44 https://support.lenovo.com/downloads/DS111943 
ThinkPad L560 6.0.1.7746 https://support.lenovo.com/downloads/DS112043 
ThinkPad P50, P50s 6.0.1.7746 https://support.lenovo.com/downloads/DS105255 
ThinkPad P70 6.0.1.7746 https://support.lenovo.com/downloads/DS105255 
ThinkPad T460 0.6.3.44 https://support.lenovo.com/downloads/DS105826 
ThinkPad T460p 0.6.3.44 https://support.lenovo.com/downloads/DS111943
ThinkPad T460s 6.0.1.7746 https://support.lenovo.com/downloads/DS105255
ThinkPad T560 6.0.1.7746 https://support.lenovo.com/downloads/DS105255 
ThinkPad X1 Tablet 6.0.1.7756 8.20.0.815 https://support.lenovo.com/downloads/DS112306
ThinkPad X1 Yoga (20FR Non-vPro) 8.66.27.58 https://support.lenovo.com/downloads/DS105864 
ThinkPad X260 0.6.3.44 https://support.lenovo.com/downloads/DS105826
ThinkPad X260 Yoga 8.66.27.58 https://support.lenovo.com/downloads/ds105864 
ThinkPad Yoga 14 460 S3 0.6.3.44 https://support.lenovo.com/downloads/DS104940


修订历史:


版本 日期 描述
 1.0  02/05/2016 初始版本


                       

0
知识有用,就点一下~
0
收藏 :
分享 :

鐢ㄦ埛鍚嶄笉姝g‘

鐧诲綍
鍏朵粬鐧诲綍鏂瑰紡

鎵撳紑鑱旀兂鏅洪€堿pp鎵爜杩涜鐧诲綍

鎵弿鎴愬姛!

璇峰嬁鍒锋柊鏈〉闈紝鎸夋墜鏈烘彁绀烘搷浣滐紒

浜岀淮鐮佸凡澶辨晥
鍒锋柊