{"id":16085,"date":"2022-10-24T10:12:11","date_gmt":"2022-10-24T03:12:11","guid":{"rendered":"https:\/\/cdcangiang.vn\/?p=16085"},"modified":"2023-03-08T09:14:15","modified_gmt":"2023-03-08T02:14:15","slug":"huong-dan-va-loi-lo-hong-bao-mat-cac-san-pham-cua-microsoft-thang-10-2022","status":"publish","type":"post","link":"https:\/\/cdcangiang.vn\/index.php\/2022\/10\/24\/huong-dan-va-loi-lo-hong-bao-mat-cac-san-pham-cua-microsoft-thang-10-2022\/","title":{"rendered":"H\u01b0\u1edbng d\u1eabn v\u00e1 l\u1ed7i l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt c\u00e1c s\u1ea3n ph\u1ea9m c\u1ee7a Microsoft th\u00e1ng 10\/2022"},"content":{"rendered":"

1. V\u00e1 l\u1ed7i cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows:<\/strong><\/h3>\n

M\u00f4 t\u1ea3 l\u1ed7i CVE-2022-41033:<\/strong> L\u1ed7 h\u1ed5ng trong Windows COM + Event System Service: cho ph\u00e9p \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ea5n c\u00f4ng th\u1ef1c hi\u1ec7n n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n. L\u1ed7 h\u1ed5ng n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c m\u1ed9t s\u1ed1 nh\u00f3m t\u1ea5n c\u00f4ng khai th\u00e1c trong th\u1ef1c t\u1ebf.<\/h3>\n

M\u00f4 t\u1ea3 l\u1ed7i CVE-2022-37987, CVE-2022-37989:<\/strong> L\u1ed7 h\u1ed5ng trong trong Windows Client Server Run-time Subsystem (CSRSS) cho ph\u00e9p \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ea5n c\u00f4ng th\u1ef1c hi\u1ec7n n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n.<\/h3>\n

1.1\u00a0 Y\u00eau c\u1ea7u ti\u00ean quy\u1ebft:<\/strong> Ph\u1ea3i x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c phi\u00ean b\u1ea3n c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows \u0111ang s\u1eed d\u1ee5ng. C\u00e1ch th\u1ef1c hi\u1ec7n nh\u01b0 sau:<\/h3>\n

– C\u00e1ch x\u00e1c \u0111\u1ecbnh phi\u00ean b\u1ea3n Win 7:<\/strong> Ch\u1ecdn bi\u1ec3u t\u01b0\u1ee3ng Start (\u1edf g\u00f3c d\u01b0\u1edbi b\u00ean tr\u00e1i m\u00e0n h\u00ecnh), nh\u1eadp\u00a0\u201cComputer\u201d\u00a0trong h\u1ed9p t\u00ecm ki\u1ebfm, b\u1ea5m chu\u1ed9t ph\u1ea3i v\u00e0o\u00a0\u201cComputer\u201d, r\u1ed3i ch\u1ecdn \u201cProperties\u201d.<\/h3>\n

 <\/p>\n

\"\"<\/p>\n

– C\u00e1ch x\u00e1c \u0111\u1ecbnh phi\u00ean b\u1ea3n Win 8.1, Win 10, Win 11:<\/strong> b\u1ea5m t\u1ed5 h\u1ee3p ph\u00edm \u201cWindows v\u00e0\u00a0R\u201d, nh\u1eadp\u00a0\u201cwinver\u201d, sau \u0111\u00f3 ch\u1ecdn\u00a0\u201cOK\u201d.<\/h3>\n

\"\"<\/p>\n

\"\"<\/p>\n

 <\/p>\n

1.2 Th\u1ef1c hi\u1ec7n t\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t b\u1ea3n v\u00e1 l\u1ed7i \u0111<\/strong>\u1ed1i v\u1edbi Windows 7 (Service Pack 1) v\u00e0 Windows 8.1:<\/strong><\/h3>\n

Sau khi \u0111\u00e3 x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c ch\u00ednh x\u00e1c phi\u00ean b\u1ea3n c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows. Th\u1ef1c hi\u1ec7n theo c\u00e1c b\u01b0\u1edbc sau \u0111\u00e2y:<\/h3>\n

– B\u01b0\u1edbc 1: <\/strong>Ch\u1ecdn \u0111\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i \u1ee9ng v\u1edbi phi\u00ean b\u1ea3n c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows theo danh s\u00e1ch b\u00ean d\u01b0\u1edbi. Ti\u1ebfp theo, ch\u1ecdn n\u00fat \u201cT\u1ea3i xu\u1ed1ng\u201d, ch\u1ecdn ti\u1ebfp \u201cV\u1eabn t\u1ea3i xu\u1ed1ng\u201d.<\/h3>\n

+ Win 7 – <\/strong>Service Pack 1 <\/strong>(32bit): <\/strong>\u0111\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1IOD6O4NaYz6L5wL11gjhNlPJTacWbcbP\/view?usp=sharing<\/a><\/h3>\n

+ Win 7 – <\/strong>Service Pack 1 <\/strong>(64bit): <\/strong>\u0111\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1-wdIBK0xL9RIvsqJsDT60xPfAC0-8CIb\/view?usp=sharing<\/a><\/h3>\n

+ Win 8.1 (32bit): <\/strong>\u0111\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1JrqPmfL6_xzIgfLnaqBOZ7fw3gPAag2Q\/view?usp=sharing<\/a><\/h3>\n

+ Win 8.1 (64bit): <\/strong>\u0111\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1JA41dM_qqENp2sg1MibxvaVfBlUzc515\/view?usp=sharing<\/a><\/h3>\n

– B\u01b0\u1edbc 2: <\/strong>Sau khi t\u1ea3i xong, th\u00ec h\u1ec7 th\u1ed1ng t\u1ef1 \u0111\u1ed9ng c\u00e0i \u0111\u1eb7t b\u1ea3n v\u00e1 l\u1ed7i cho Windows.<\/h3>\n

* L\u01b0u \u00fd:<\/strong><\/span><\/h3>\n

– Tr\u01b0\u1eddng h\u1ee3p b\u00e1o l\u1ed7i 0x80070422:<\/strong><\/span> nguy\u00ean nh\u00e2n do d\u1ecbch v\u1ee5 Windows Update \u0111ang \u1edf ch\u1ebf \u0111\u1ed9 t\u1eaft. H\u00e3y l\u00e0m theo c\u00e1ch sau:<\/h3>\n

+ B\u01b0\u1edbc 1:<\/strong> B\u1ea5m t\u1ed5 h\u1ee3p ph\u00edm (Windows v\u00e0 R<\/strong>) > g\u00f5 services.msc<\/strong>\u00a0(trong h\u1ed9p tho\u1ea1i\u00a0Run) >\u00a0b\u1ea5m\u00a0Enter<\/strong>\u00a0\u0111\u1ec3 \u0111\u1ebfn tr\u00ecnh qu\u1ea3n l\u00fd\u00a0Services Manager.<\/h3>\n

+ B\u01b0\u1edbc 2<\/strong>: T\u00ecm \u0111\u1ebfn d\u1ecbch v\u1ee5\u00a0Windows Update<\/strong> v\u00e0 double-click v\u00e0o n\u00f3 \u0111\u1ec3 m\u1edf h\u1ed9p tho\u1ea1i\u00a0Properties<\/strong>. T\u00ecm \u0111\u1ebfn\u00a0Startup type\u00a0v\u00e0 ch\u1ecdn\u00a0Automatic<\/strong> trong danh s\u00e1ch \u0111\u01b0\u1ee3c hi\u1ec3n th\u1ecb.<\/h3>\n

+ B\u01b0\u1edbc 3:<\/strong> Ch\u1ecdn n\u00fat Start<\/strong> > ch\u1ecdn Apply > <\/strong>ch\u1ecdn OK<\/strong>. Kh\u1edfi \u0111\u1ed9ng l\u1ea1i m\u00e1y t\u00ednh.<\/h3>\n

+ B\u01b0\u1edbc 4:<\/strong> Sau khi kh\u1eafc ph\u1ee5c l\u1ed7i 0x80070422, h\u00e3y <\/span><\/span>th\u1ef1c hi\u1ec7n c\u00e0i \u0111\u1eb7t l\u1ea1i b\u1ea3n v\u00e1 l\u1ed7i cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows \u0111\u00e3 h\u01b0\u1edbng d\u1eabn \u1edf ph\u1ea7n tr\u00ean (t\u1eadp tin c\u00e0i \u0111\u1eb7t n\u1eb1m trong th\u01b0 m\u1ee5c Downloads).<\/h3>\n

– Tr\u01b0\u1eddng h\u1ee3p b\u00e1o l\u1ed7i 0x800b0109:<\/strong><\/span> nguy\u00ean nh\u00e2n do Windows registry b\u1ecb x\u00e1o tr\u1ed9n ho\u1eb7c l\u1ed7i m\u1ee5c nh\u1eadp ch\u01b0\u01a1ng tr\u00ecnh kh\u00f4ng t\u1ed3n t\u1ea1i th\u01b0\u1eddng do ho\u1ea1t \u0111\u1ed9ng g\u1ee1 c\u00e0i \u0111\u1eb7t kh\u00f4ng ch\u00ednh x\u00e1c. H\u00e3y t\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t t\u01b0\u01a1ng \u1ee9ng v\u1edbi danh s\u00e1ch sau:<\/h3>\n

+ Win 7 – 32 bit: \u0111\u01b0\u1eddng d\u1eabn t\u1ea3i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1du1xDR3OM8nTMrE2Fi8KcZeksiuln6LS\/view?usp=sharing<\/a><\/h3>\n

+ Win 7 – 64 bit: \u0111\u01b0\u1eddng d\u1eabn t\u1ea3i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/14jxdTKXVyU3BH6x_GNREJa75Ry_o0juz\/view?usp=sharing<\/a><\/h3>\n

+ Win 8.1 – 32 bit: \u0111\u01b0\u1eddng d\u1eabn t\u1ea3i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1Mnjre6ZA_TnjtT7cMr6ztqDc4PQr94-Z\/view?usp=sharing<\/a><\/h3>\n

+ Win 8.1 \u2013 64 bit: \u0111\u01b0\u1eddng d\u1eabn t\u1ea3i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1rMkh2aj4Z3HoGh_DmMJb4cI9gIr2_9bY\/view?usp=sharing<\/a><\/h3>\n

Sau khi kh\u1eafc ph\u1ee5c l\u1ed7i 0x800b0109,<\/span> h\u00e3y th\u1ef1c hi\u1ec7n c\u00e0i \u0111\u1eb7t l\u1ea1i b\u1ea3n v\u00e1 l\u1ed7i cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows \u0111\u00e3 h\u01b0\u1edbng d\u1eabn \u1edf ph\u1ea7n tr\u00ean (t\u1eadp tin c\u00e0i \u0111\u1eb7t n\u1eb1m trong th\u01b0 m\u1ee5c Downloads).<\/h3>\n

1.3 Th\u1ef1c hi\u1ec7n t\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t b\u1ea3n v\u00e1 l\u1ed7i \u0111<\/strong>\u1ed1i v\u1edbi<\/strong> Windows 10 v\u00e0 Windows 11:<\/strong> s\u1eed d\u1ee5ng ch\u1ee9c n\u0103ng \u201cCheck for Updates\u201d c\u1ee7a Windows Update<\/h3>\n

– Win 10: ch\u1ecdn Start\u00a0>\u00a0Setting > Update and Security > Windows Update. Sau \u0111\u00f3, ch\u1ecdn \u201cCheck for Updates\u201d.<\/h3>\n

– Win 11:\u00a0ch\u1ecdn Start\u00a0> Setting >\u00a0Windows Update. Sau \u0111\u00f3, ch\u1ecdn \u201cCheck for Updates\u201d.<\/h3>\n

2.\u00a0 V\u00e1 l\u1ed7i cho Microsoft Office: <\/strong>ch\u1ec9 v\u00e1 l\u1ed7i cho Microsoft Office 2013 (Service Pack 1), Office 2016. Kh\u00f4ng \u00e1p d\u1ee5ng cho c\u00e1c b\u1ea3n Microsoft Office kh\u00e1c.<\/h3>\n

M\u00f4 t\u1ea3 l\u1ed7i<\/strong> CVE-2022-38048, CVE-2022-41043, CVE-2022-38001<\/strong>:<\/strong> L\u1ed7 h\u1ed5ng trong Microsoft Office cho ph\u00e9p \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ea5n c\u00f4ng th\u1ef1c thi m\u00e3 t\u1eeb xa, thu th\u1eadp th\u00f4ng tin, t\u1ea5n c\u00f4ng gi\u1ea3 m\u1ea1o (Spoofing).<\/h3>\n

2.1 Y\u00eau c\u1ea7u ti\u00ean quy\u1ebft:<\/strong> Ph\u1ea3i x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c phi\u00ean b\u1ea3n c\u1ee7a Microsoft Office \u0111ang s\u1eed d\u1ee5ng. C\u00e1ch th\u1ef1c hi\u1ec7n nh\u01b0 sau:<\/h3>\n

M\u1edf Microsoft Word > ch\u1ecdn \u201cFile\u201d (\u1edf g\u00f3c tr\u00ean b\u00ean tr\u00e1i) > ch\u1ecdn \u201cAccount\u201d > ch\u1ecdn v\u00e0o\u00a0\u201cAbout Word\u201d.<\/h3>\n

 <\/p>\n

\"\"<\/p>\n

K\u1ebft qu\u1ea3 t\u1eeb h\u00ecnh n\u00e0y cho bi\u1ebft:<\/strong><\/span>\u00a0Word 2016 (32-bit).<\/h3>\n

2.2 Th\u1ef1c hi\u1ec7n t\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t b\u1ea3n v\u00e1 l\u1ed7i \u0111<\/strong>\u1ed1i v\u1edbi <\/strong>Microsoft Office<\/strong><\/h3>\n

– B\u01b0\u1edbc 1: <\/strong>Ch\u1ecdn \u0111\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i \u1ee9ng v\u1edbi phi\u00ean b\u1ea3n c\u1ee7a Microsoft Office theo danh s\u00e1ch b\u00ean d\u01b0\u1edbi. Ti\u1ebfp theo, ch\u1ecdn n\u00fat \u201cT\u1ea3i xu\u1ed1ng\u201d, ch\u1ecdn ti\u1ebfp \u201cV\u1eabn t\u1ea3i xu\u1ed1ng\u201d.<\/h3>\n

+ Office 2013 (Service Pack 1) (32bit): <\/strong>\u0110\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1IplBq57y6OE8-1uLyZg415U62zio80oI\/view?usp=sharing<\/a><\/h3>\n

+ Office 2013 (Service Pack 1) (64bit): <\/strong>\u0110\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1RH2ho6GovljAazg9AZEacM-4swH7kthz\/view?usp=sharing<\/a><\/h3>\n

+ Office 2016 (32bit): <\/strong>\u0110\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1RH2ho6GovljAazg9AZEacM-4swH7kthz\/view?usp=sharing<\/a><\/h3>\n

+ Office 2016 (64bit): <\/strong>\u0110\u01b0\u1eddng d\u1eabn t\u1ea3i b\u1ea3n v\u00e1 l\u1ed7i<\/h3>\n

https:\/\/drive.google.com\/file\/d\/1N5hbE3zeQIO7QYGDhIDk5khbPXb4HgEp\/view?usp=sharing<\/a><\/h3>\n

– B\u01b0\u1edbc 2: <\/strong>Sau khi t\u1ea3i xong, ti\u1ebfn h\u00e0nh c\u00e0i \u0111\u1eb7t<\/h3>\n

+ Ch\u1ecdn t\u1eadp tin \u0111\u00e3 t\u1ea3i xong \u1edf g\u00f3c tr\u00e1i b\u00ean d\u01b0\u1edbi m\u00e0n h\u00ecnh.<\/h3>\n

+ Ch\u1ecdn \u201cClick here to accept the Microsoft Software \u2026\u201d. Ch\u1ecdn n\u00fat \u201cContinue\u201d.<\/h3>\n

+ Vi\u1ec7c c\u00e0i \u0111\u1eb7t c\u00f3 th\u1ec3 m\u1ea5t v\u00e0i ph\u00fat.\/.<\/h3>\n

\u00a0<\/strong>Minh H\u1ea3i<\/em><\/h3>\n

Khoa TT-GDSK, TT.KSBT An Giang<\/em><\/h3>\n

T\u1ea3i t\u1eadp tin h\u01b0\u1edbng d\u1eabn:\u00a0T\u1ea1i \u0111\u00e2y<\/a><\/h2>\n","protected":false},"excerpt":{"rendered":"

1. V\u00e1 l\u1ed7i cho h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows: M\u00f4 t\u1ea3 l\u1ed7i CVE-2022-41033: L\u1ed7 h\u1ed5ng trong Windows COM + Event System Service: cho ph\u00e9p \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ea5n c\u00f4ng th\u1ef1c hi\u1ec7n n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n. L\u1ed7 h\u1ed5ng n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c m\u1ed9t s\u1ed1 nh\u00f3m t\u1ea5n c\u00f4ng khai th\u00e1c trong th\u1ef1c t\u1ebf. M\u00f4 t\u1ea3 l\u1ed7i CVE-2022-37987, CVE-2022-37989: L\u1ed7 h\u1ed5ng […]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"limit_modified_date":"","last_modified_date":"","footnotes":""},"categories":[315],"tags":[],"class_list":["post-16085","post","type-post","status-publish","format-standard","hentry","category-tailieu-cds"],"_links":{"self":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/16085","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/comments?post=16085"}],"version-history":[{"count":4,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/16085\/revisions"}],"predecessor-version":[{"id":16125,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/16085\/revisions\/16125"}],"wp:attachment":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/media?parent=16085"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/categories?post=16085"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/tags?post=16085"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}