Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage

Summary: Microsoft's January 2020 Patch Tuesday covered 49 vulnerabilities, eight rated critical, including CVE-2020-0601, a spoofing flaw in the Windows CryptoAPI component crypt32.dll that improperly validates Elliptic Curve Cryptography certificates. Cisco Talos released SNORT rules covering some of the vulnerabilities, and the update was the last to provide free updates to Windows 7 and Windows Server 2008/2008 R2.
Why it matters: CVE-2020-0601 lets an attacker sign a malicious executable so it appears to come from a trusted source, with the victim having no way to know the file was malicious, and reporter Brian Krebs says Microsoft secretly deployed a patch to branches of the U.S. military before the public release.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-0601 CVE-2020-0603 CVE-2020-0605 CVE-2020-0606 CVE-2020-0609 CVE-2020-0610 CVE-2020-0611 CVE-2020-0616 CVE-2020-0640 CVE-2020-0646 CVE-2020-0654
Related: CVE-2020-0646: Microsoft .NET Framework Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
CVE-2020-0601: Microsoft Windows CryptoAPI Spoofing Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
Patch Tuesday, January 2020 Edition Cyber Risks ·