所有分类 > 病毒与安全 > 漏洞与防护 > Dolby Audio X2(DAX2)越权漏洞

Dolby Audio X2(DAX2)越权漏洞

. 1470910210 | 知识编号: 151405

故障现象:

Lenovo 安全公告:LEN-4884


潜在影响:本地越权漏洞


Audio X2(DAX2)软件实用程序的文件权限存在一个漏洞,通过该漏洞,本地用户可以利用系统级别权限运行文件。


描述:


Dolby Audio X2(DAX2)是 Dolby Laboratories 为众多供应商开发的行业标准软件程序,利用该软件,用户可以优化其系统的音频系能。某些预装了 Windows 10 操作系统的 Lenovo 系统中包含此程序。


已发现 Dolby DAX2 应用程序编程接口(API)的文件权限存在漏洞,通过该漏洞,本地用户可以利用系统级别权限运行文件。


解决方案:

应采取哪些措施进行自我保护:


Lenovo 正与 Dolby 协作,以推出此驱动程序的更新版本,其中将包含针对此漏洞的修复程序。对于担心此问题的客户,Lenovo 已经发布了批处理文件,该文件可修复针对 Windows Dolby 驱动程序文件的不安全权限。通过以管理员身份运行该批处理文件,Dolby Audio X2 驱动程序将不再会受到此问题的影响。可在命令提示符窗口中运行以下命令:


对于 32 位 Windows:icacls "C:Program Files (x86)DolbyDolby DAX2DAX2_API" /remove "Authenticated Users"


对于 64 位 Windows:icacls "C:Program FilesDolbyDolby DAX2DAX2_API" /remove "Authenticated Users"


产品影响:


IdeaPad


产品 最低修复程序版本 链接
Edge 2-15806.0.1.7756http://support.lenovo.com/downloads/DS104700
Flex3-1480  (SKL)/Flex3-1580  (SKL)6.0.1.7756http://support.lenovo.com/downloads/DS104700
IdeaPad 500-14 ISK Non JBL/IdeaPad 500-14 ISK  JBL/IdeaPad 500-15 ISK Non JBL/IdeaPad 500-15 ISK  JBL/ IdeaPad 500-15 ISK Non JBL 3D/IdeaPad 500-15 ISK JBL 3D/6.0.1.7756http://support.lenovo.com/downloads/DS104724
IdeaPad 500-15 ISK  JBL6.0.1.7756http://support.lenovo.com/downloads/DS104724
Ideapad 500S-13ISK6.0.1.7624http://support.lenovo.com/downloads/DS105034
Ideapad 500S-14ISK6.0.1.7756http://support.lenovo.com/downloads/DS104700
ideapad 500S-15ISK6.0.1.7647http://support.lenovo.com.cn/lenovo/wsi/Modules/IdeaPad500s-15ISK
ideapad 700-15 ISK/ideapad 700-17 ISK6.0.1.7801http://support.lenovo.com/downloads/DS111733
IdeaPad Erazer 500-14 ISK  JBL6.0.1.7756http://support.lenovo.com/downloads/DS104724
IdeaPad Erazer 500-14 ISK Non JBL6.0.1.7756http://support.lenovo.com/downloads/DS104724
Lenovo Ideapad 700-15ISK JBL6.0.1.7801http://support.lenovo.com/downloads/DS111733
Lenovo Ideapad 700-15ISK Non- JBL6.0.1.7801http://support.lenovo.com/downloads/DS111733
Lenovo Ideapad 700-17ISK JBL6.0.1.7801http://support.lenovo.com/downloads/DS111733
Lenovo XiaoXin 700-15ISK6.0.1.7714http://support.lenovo.com.cn/lenovo/wsi/Modules/LenovoXiaoXin700-15ISK
Lenovo Yoga 500-14ISK6.0.1.7756http://support.lenovo.com/downloads/DS104700
Lenovo Yoga 500-15ISK6.0.1.7756http://support.lenovo.com/downloads/DS104700
M51-806.0.1.7647http://support.lenovo.com.cn/lenovo/wsi/Modules/IdeaPad500s-15ISK
Y700-14 ISK6.0.1.7756http://support.lenovo.com/downloads/DS105282
Y700-15 ACZ6.0.1.7767http://support.lenovo.com/downloads/DS105657
Y700-15 ISK/Y700-17 ISK/Y700-15 ISK 3D/Y700-15 ISK Touch6.0.1.7786_W...http://support.lenovo.com/downloads/DS105105
Y900-17ISK/Y900-17ISK 3D Camera6.0.1.7767http://support.lenovo.com/downloads/DS113306
Yoga 700-11ISK6.0.1.7756_F...http://support.lenovo.com/downloads/DS105063
Yoga 700-14ISK8.66.29.52http://support.lenovo.com/downloads/DS104869
Yoga 900-13ISK6.0.1.7756_W...http://support.lenovo.com/downloads/DS105076
Yoga 900-13ISK for Business6.0.1.7756_W...http://support.lenovo.com/downloads/DS105076
Yoga 900S-12ISK6.0.1.7756http://support.lenovo.com/downloads/DS112688


ThinkCentre


Product Minimum Fix Version Link
ThinkCentre X16.0.1.7743http://support.lenovo.com/downloads/DS112068


ThinkPad


Product Minimum Fix Version Link
ThinkPad 13e0.6.3.44http://support.lenovo.com/downloads/DS112489
ThinkPad E460/E5600.6.3.44http://support.lenovo.com/downloads/DS105337
ThinkPad E465/E5650.6.3.44http://support.lenovo.com/downloads/DS105337 
ThinkPad L4600.6.3.44http://support.lenovo.com/downloads/DS111943 
ThinkPad L5606.0.1.7746http://support.lenovo.com/downloads/DS112043 
ThinkPad P50, P50s6.0.1.7746http://support.lenovo.com/downloads/DS105255 
ThinkPad P706.0.1.7746http://support.lenovo.com/downloads/DS105255 
ThinkPad T4600.6.3.44http://support.lenovo.com/downloads/DS105826 
ThinkPad T460p0.6.3.44http://support.lenovo.com/downloads/DS111943
ThinkPad T460s6.0.1.7746http://support.lenovo.com/downloads/DS105255
ThinkPad T5606.0.1.7746http://support.lenovo.com/downloads/DS105255 
ThinkPad X1 Tablet6.0.1.7756 8.20.0.815http://support.lenovo.com/downloads/DS112306
ThinkPad X1 Yoga (20FR Non-vPro)8.66.27.58http://support.lenovo.com/downloads/DS105864 
ThinkPad X2600.6.3.44http://support.lenovo.com/downloads/DS105826
ThinkPad X260 Yoga8.66.27.58http://support.lenovo.com/downloads/ds105864 
ThinkPad Yoga 14 460 S30.6.3.44http://support.lenovo.com/downloads/DS104940


修订历史:


版本 日期 描述
 1.0 02/05/2016初始版本


                       

联想网站提供的技术方案或与您产品的实际情况有所差异,您需在完整阅读方案并知晓其提示风险的情况下谨慎操作,避免造成任何损失。