Windows CryptoAPIã®è„†å¼±æ€§ã«ã‚ˆã‚‹ECC証明書ã®å½é€ (CVE-2020-0601) - ã¼ã¡ã¼ã¡æ—¥è¨˜1. ã¯ã˜ã‚ã« ã¤ã„先日ã®Windowsã®ã‚»ã‚ュリティアップデートã§Windowsã®CryptoAPIã®æ¥•å††æ›²ç·šæš—å·å‡¦ç†ã«é–¢é€£ã—ãŸè„†å¼±æ€§ã®ä¿®æ£ãŒè¡Œã‚ã‚Œã¾ã—ãŸã€‚ 「CVE-2020-0601 | Windows CryptoAPI Spoofing Vulnerability〠ã“ã‚ŒãŒã¾ã世界ã®æš—å·å°‚門家をä¸å¿ƒã«ã‚»ã‚ュリティæ¥ç•Œã‚’é©šã‹ã›ã€ã„ã‚ã„ã‚騒ãŒã—ã¦ã„ã¾ã™ã€‚ ãã®é©šãã®ä¸€ã¤ã¯ã€ã“ã®è„†å¼±æ€§ã®å ±å‘Šè€…ãŒNSA(米国家安全ä¿éšœå±€)ã ã£ãŸã“ã¨ã§ã™ã€‚NSAã¯Microsoftã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã¨ã¯åˆ¥ã«ã‚ˆã‚Šè©³ã—ã„内容ã§ã“ã®è„†å¼±æ€§ã‚’è¦å‘Šã™ã‚‹ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã‚’出ã—ã¦ã„ã¾ã™ã€‚ 「Patch Critical Cryptographic Vulnerability in Microsoft Windows Clients and Servers〠ã“ã‚Œã¾ã§æ•°ã€…ã®è«œå ±æ´»å‹•ã‚’インターãƒãƒƒãƒˆä¸Šã§è¡Œã£ã¦ããŸNSAãŒã€ã“ã®è„†å¼±æ€§ã‚’
{{#tags}}- {{label}}
{{/tags}}