¡¾Íþвͨ¸æ¡¿°²×¿À¶ÑÀ×é¼þ¸ßΣÎó²î£¨CVE-2020-0022£©
2020-02-02
×ÛÊö
¿ËÈÕ£¬¹È¸èÐû²¼2Ô°²×¿Çå¾²²¹¶¡£¬ÆäÖÐÐÞ¸´ÁËÒ»¸ö¸ßΣµÄÀ¶ÑÀ×é¼þÎó²î£¨CVE-2020-0022£©¡£¸ÃÎó²îÎÞÐèÓû§µÄ½»»¥²Ù×÷£¬ÔÚ×°±¸·¿ªÀ¶ÑÀʱ¼´¿É±»¹¥»÷£¬¹¥»÷ÕßÀÖ³ÉʹÓøÃÎó²î¼´¿ÉÔÚÄ¿µÄϵͳÉÏÖ´ÐÐí§Òâ´úÂ롣ͬʱÑо¿Ö°Ô±»¹Ö¸³ö¸ÃÎó²î¿ÉÄܱ»¹¥»÷ÕßÓÃÀ´ÖÆ×÷¿ÉÒÔ×ÔÖ÷Èö²¥µÄÈ䳿ÐÍÎó²î¡£
ÊÜÓ°ÏìµÄ°æ±¾
- Android version < 10
²»ÊÜÓ°ÏìµÄ°æ±¾
- Android version 10
»º½â²½·¥
½¨ÒéÊÜÓ°ÏìµÄ°²×¿Óû§¾¡¿ìÉý¼¶£¬¾ÙÐзÀ»¤¡£
ÈôÔÝʱÎÞ·¨Éý¼¶£¬Ôò½¨ÒéʹÓÃÊÜÓ°Ïìϵͳ°æ±¾µÄÖÕ¶ËÔÚ·ÇÐëÒªµÄÇéÐÎϹرÕÀ¶ÑÀ¹¦Ð§¡£
ÏêÇé²Î¿¼¹Ù·½Í¨¸æ£º
https://source.android.com/security/bulletin/2020-02-01
²Î¿¼Á´½Ó
https://www.zdnet.com/article/google-fixes-no-user-interaction-bug-in-androids-bluetooth-component/
https://source.android.com/security/bulletin/2020-02-01
ÉùÃ÷
±¾Ç徲ͨ¸æ½öÓÃÀ´ÐÎò¿ÉÄܱ£´æµÄÇå¾²ÎÊÌ⣬¾ÅÓÎÀÏ¸ç¿Æ¼¼²»Îª´ËÇ徲ͨ¸æÌṩÈκΰü¹Ü»òÔÊÐí¡£ÓÉÓÚÈö²¥¡¢Ê¹ÓôËÇ徲ͨ¸æËùÌṩµÄÐÅÏ¢¶øÔì³ÉµÄÈκÎÖ±½Ó»òÕß¼ä½ÓµÄЧ¹û¼°Ëðʧ£¬¾ùÓÉʹÓÃÕß×Ô¼ºÈÏÕæ£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÒÔ¼°Ç徲ͨ¸æ×÷Õß²»Îª´Ë¼ç¸ºÈκÎÔðÈΡ£¾ÅÓÎÀÏ¸ç¿Æ¼¼ÓµÓжԴËÇ徲ͨ¸æµÄÐÞ¸ÄÏ¢ÕùÊÍȨ¡£ÈçÓû×ªÔØ»òÈö²¥´ËÇ徲ͨ¸æ£¬±ØÐè°ü¹Ü´ËÇ徲ͨ¸æµÄÍêÕûÐÔ£¬°üÀ¨°æÈ¨ÉùÃ÷µÈËùÓÐÄÚÈÝ¡£Î´¾¾ÅÓÎÀÏ¸ç¿Æ¼¼ÔÊÐí£¬²»µÃí§ÒâÐ޸ĻòÕßÔö¼õ´ËÇ徲ͨ¸æÄÚÈÝ£¬²»µÃÒÔÈκη½·¨½«ÆäÓÃÓÚÉÌҵĿµÄ¡£
¹ØÓÚ¾ÅÓÎÀÏ¸ç¿Æ¼¼
±±¾©ÉñÖݾÅÓÎÀϸçÐÅÏ¢Çå¾²¿Æ¼¼¹É·ÝÓÐÏÞ¹«Ë¾£¨¼ò³Æ¾ÅÓÎÀÏ¸ç¿Æ¼¼£©½¨ÉèÓÚ2000Äê4Ô£¬×ܲ¿Î»ÓÚ±±¾©¡£ÔÚº£ÄÚÍâÉèÓÐ30¶à¸ö·ÖÖ§»ú¹¹£¬ÎªÕþ¸®¡¢ÔËÓªÉÌ¡¢½ðÈÚ¡¢ÄÜÔ´¡¢»¥ÁªÍøÒÔ¼°½ÌÓý¡¢Ò½ÁƵÈÐÐÒµÓû§£¬Ìṩ¾ßÓн¹µã¾ºÕùÁ¦µÄÇå¾²²úÆ·¼°½â¾ö¼Æ»®£¬×ÊÖú¿Í»§ÊµÏÖÓªÒµµÄÇ徲˳³©ÔËÐС£
»ùÓÚ¶àÄêµÄÇå¾²¹¥·ÀÑо¿£¬¾ÅÓÎÀÏ¸ç¿Æ¼¼ÔÚÍøÂç¼°ÖÕ¶ËÇå¾²¡¢»¥ÁªÍø»ù´¡Çå¾²¡¢ºÏ¹æ¼°Çå¾²ÖÎÀíµÈÁìÓò£¬Îª¿Í»§ÌṩÈëÇÖ¼ì²â/·À»¤¡¢¿¹¾Ü¾ø·þÎñ¹¥»÷¡¢Ô¶³ÌÇå¾²ÆÀ¹ÀÒÔ¼°WebÇå¾²·À»¤µÈ²úÆ·ÒÔ¼°×¨ÒµÇå¾²·þÎñ¡£
±±¾©ÉñÖݾÅÓÎÀϸçÐÅÏ¢Çå¾²¿Æ¼¼¹É·ÝÓÐÏÞ¹«Ë¾ÓÚ2014Äê1ÔÂ29ÈÕÆðÔÚÉîÛÚ֤ȯÉúÒâËù´´Òµ°åÉÏÊУ¬¹ÉƱ¼ò³Æ£º¾ÅÓÎÀÏ¸ç¿Æ¼¼£¬¹ÉƱ´úÂ룺300369¡£

¾ÅÓÎÀϸçÔÆ





