Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage

Summary: Microsoft's February 2020 Patch Tuesday disclosed 98 vulnerabilities, 12 rated critical and 84 important, with two bugs left unassigned a severity, covering the Windows kernel, Windows scripting engine and Remote Desktop Protocol, plus a critical advisory for Adobe Flash Player. Cisco Talos released new SNORT rules covering some of these flaws, including memory corruption bugs in the scripting engine (CVE-2020-0673, CVE-2020-0674, CVE-2020-0710 through CVE-2020-0713 and CVE-2020-0767) and remote code execution bugs in RDP (CVE-2020-0681, CVE-2020-0734).
Key Takeaway: The RDP flaws in CVE-2020-0681 and CVE-2020-0734 trigger when a user connects to a malicious server, so the exposure runs through social engineering or a man-in-the-middle rather than an inbound attack on your perimeter. And CVE-2020-0729 executes code from a crafted .LNK file on a removable drive or remote share, which means a single opened file can hand an attacker code execution.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-0662 CVE-2020-0673 CVE-2020-0674 CVE-2020-0681 CVE-2020-0710 CVE-2020-0711 CVE-2020-0712 CVE-2020-0713 CVE-2020-0729 CVE-2020-0734 CVE-2020-0738 CVE-2020-0767
Related: Microsoft Patch Tuesday, February 2020 Edition Cyber Risks ·
CVE-2020-0674: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026