Key Takeaways
- Windows Print Spooler tau nyob hauv nruab nrab ntawm ntau qhov kev nyab xeeb tsis ntev los no.
- Txoj kev tshwj xeeb Windows Print Spooler ua haujlwm ua rau cov haujlwm luam ntawv nyuaj yooj yim dua, tab sis nws tsis ruaj ntseg.
- Rho tawm lub Luam Ntawv Spooler thiab muab kev tswj hwm nws tuaj yeem ua rau nws tsis tshua muaj kev cuam tshuam, yog tias Microsoft txaus siab ua nws.
Windows Print Spooler tau nyob hauv nruab nrab ntawm ntau qhov kev nyab xeeb tsis ntev los no, thiab txawm tias Microsoft tau siv zog, qhov teeb meem tsis ploj mus.
Nyob rau hauv ib lub hlis xwb, Microsoft tau txheeb xyuas peb qhov kev nyab xeeb kev nyab xeeb khi rau Windows Print Spooler, nrog thaj ua rau thaj tso tawm rau ob ntawm lawv txog tam sim no. CVE-2021-34527 (aka "PrintNightmare"), CVE-2021-34481, thiab tam sim no CVE-2021-36958 tau ua rau cov neeg ua phem ua phem muab lawv tus kheej tag nrho SYSTEM cov cai. Disabling the Print Spooler yog ib qho kev xaiv, tab sis qhov no tiv thaiv koj ntawm kev tuaj yeem txuas txhua lub tshuab luam ntawv rau koj lub computer. Nws nyob deb ntawm qhov kev daws teeb meem zoo.
"Qhov teeb meem no tsis tu ncua cuam tshuam rau cov servers thiab cov neeg siv khoom ntawm Windows, los ntawm Windows 7 txog 10, thiab cov servers 2019, 2004, 2012, 2008, thiab 2016," said Felix Maberly, cybersecurity expert ntawm Tiger Supplies, hauv email. kev xam phaj nrog Lifewire. "Txhua thaj chaw tsim los ntawm Microsoft tsis tuaj yeem kaw qhov kev hem thawj no."
Vim li cas thiaj luam tawm Spooler?
Spoolers, feem ntau, yog qhov pib ua cov tshuab luam ntawv-lawv sau tag nrho cov ntaub ntawv tsim nyog, xa mus rau tus tsav tsheb luam ntawv, ces tus tsav tsheb tau txais lub tshuab luam ntawv txav mus. Microsoft's version siv lub Windows Graphical Device Interface (GDI) nrog rau tus tsav luam ntawv qhia lub tshuab luam ntawv yuav ua li cas, tsis yog daim ntawv thov. Qhov no ua kom yooj yim luam ntawv cov haujlwm rau cov haujlwm nyuaj dua thiab tshem tawm daim ntawv thov kev xav tau kom paub yuav ua li cas khiav lag luam cov qauv tshwj xeeb.
"Txawm hais tias cov txheej txheem siv los ntawm Microsoft's Print Spooler yog qhov zoo nkauj heev thiab tso cai rau cov neeg siv tuaj tos lawv cov ntaub ntawv luam tawm thaum ua lwm yam haujlwm hauv lub khoos phis tawj, kev siv GDI ua rau nws tsis muaj kev nyab xeeb," said Peter B altazar, technical. Cov ntsiab lus sau ntawm MalwareFox, hauv email, "zoo li tsis zoo li cov txheej txheem classical, kev tswj hwm tag nrho ntawm kev luam ntawv tsis yog nrog daim ntawv thov spooler."
Yog li nws zoo li qhov teeb meem tseem ceeb nrog Windows Print Spooler qhov tsis zoo yog qhov tseem ceeb uas ua rau nws sib nrug los ntawm lwm cov spoolers: qhov kev cia siab ntawm GDI. Splitting tswj ntawm Windows Print Spooler thiab GDI, ntxiv rau muaj GDI tuav tag nrho cov ntaub ntawv luam tawm, tawm hauv qhov system qhib. Microsoft, rau nws qhov credit, tau sim ua kom nyob rau saum cov khoom los ntawm kev tso ntau yam kev ruaj ntseg hloov tshiab rau cov kab ke cuam tshuam.
"Microsoft tau tso tawm ntau thaj chaw los daws cov teeb meem," Maberly hais. "Txawm li cas los xij, thaum lub sijhawm tos, cov lus nug tseem nyob ntawm seb cov tuam txhab thiab lwm tus neeg puas yuav [yuav txaus siab] nyob tsis muaj zog los muab sijhawm rau Microsoft los tso cov thaj ua rau thaj no."
Microsoft Kho Nws?
Microsoft tshaj tawm kev ruaj ntseg hloov kho raws sijhawm yog qhov zoo, thiab zoo li tau tswj hwm qhov no nrog cov txheeb ze ceev raws li qhov muaj qhov tsis zoo tshiab tau lees paub. Txawm li cas los xij, thaum nws los txog rau kev ruaj ntseg, yuav tsum tau tos ob peb lub lis piam rau kev kho yuav tsis zoo txaus. Tshwj xeeb tshaj yog thaum muaj qhov tsis zoo tshiab tseem raug tshawb pom thaum cov neeg paub tab tom raug hais.
"Microsoft yuav tsum xyuas kom meej tias peb tau txais cov kev daws teeb meem mus tas li thaum peb tos, es tsis yog muaj thaj chaw uas tsis ntev yuav ua rau muaj kev phom sij," Maberly hais.
Puas yog nws ua tau rau Microsoft kom ruaj ntseg-inasmuch li lub khoos phis tawj program tuaj yeem ruaj ntseg-Windows Print Spooler ntawm lub sijhawm no? Nws puas tuaj yeem kaw cov dej thiab kho cov kav dej es tsis txhob sim ntsaws cov xau tshiab raws li nws pom? Muab ntau npaum li cas nws yuav tsum thawb Print Spooler kev ruaj ntseg hloov tshiab nyob rau lub hli dhau los, ib yam dab tsi yuav tsum tau hloov.
"Microsoft yuav tsum rov tsim kho [lub Print Spooler], thiab [hauv] lub sijhawm no khaws cov ntaub ntawv tshiab los kho nws. Lub sijhawm no lawv yuav tsum khaws cov kev nyab xeeb ntawm kev siv GDI hauv siab," B altazar hais. "…Tus spooler yuav tsum muaj kev tswj hwm txhua kauj ruam kom ua tiav txoj haujlwm luam ntawv. Qhov no yuav ua kom nruj nruj raws li cov txheej txheem thiab ua rau lub spooler tsis tshua muaj kev cuam tshuam rau kev nkag mus."
