¡¾·ì϶¹«¸æ¡¿Windows Cloud Files Mini Filter Driver ±¾µØȨÏÞÌáÉý·ì϶(CVE-2020-17103)

°ä²¼¹¦·ò 2026-05-19

Ò»¡¢·ì϶¸ÅÊö


0519·ì϶¸ÅÊö.png


Windows Cloud Files Mini Filter Driver(cldflt.sys)ÊÇWindowsÄÚºËÇý¶¯£¬£¬ £¬£¬£¬£¬£¬ÓÃÓÚÖÎÀíÔƶËÎļþͬ²½Óëռλ·ûÎļþ²Ù×÷£¬£¬ £¬£¬£¬£¬£¬Ö§³ÖFiles On-DemandÖ°ÄÜ£¬£¬ £¬£¬£¬£¬£¬ÊµÏÖ±¾µØÓëÔƶËÊý¾ÝͨÃ÷½Ó¼ûÓ뻺´æÖÎÀí£¬£¬ £¬£¬£¬£¬£¬±£ÏÕϵͳÓëÀûÓöÔÔÆÎļþµÄ¸ßЧ¶Áд¡£¡£¡£¡£¡£

2026Äê5ÔÂ19ÈÕ£¬£¬ £¬£¬£¬£¬£¬8827Ì«Ñô¼¯ÍÅ°²È«Ó¦¼±ÏìÓ¦ÖÐÐÄ£¨VSRC£©¼à²âµ½Windows Cloud Files Mini Filter Driver±¾µØȨÏÞÌáÉý·ì϶¡£¡£¡£¡£¡£¸Ã·ì϶´æÔÚÓÚHsmOsBlockPlaceholderAccessÀý³ÌÔÚ´¦ÖÃ×¢²á±íÏî´´½¨Ê±Î´ÕýÈ·Ö´ÐнӼû²é³­£¬£¬ £¬£¬£¬£¬£¬µ¼Ö¹¥»÷Õß¿ÉÀûÓþºÌ¬Ç°Ìá°Ñ³ÖÄÚºËÖеÄRtlOpenCurrentUserº¯Êý£¬£¬ £¬£¬£¬£¬£¬Èƹý½Ó¼û½ÚÔ죬£¬ £¬£¬£¬£¬£¬½«Í¨³£Óû§È¨ÏÞÌáÉýÖÁSYSTEM£¬£¬ £¬£¬£¬£¬£¬²¢Ïò.DEFAULTÓû§ÅäÖõ¥ÔªÐ´ÈëËÁÒâ×¢²á±í¼üÖµ£¬£¬ £¬£¬£¬£¬£¬´Ó¶øÆëÈ«½ÚÔìÖ¸±êÖ÷»ú¡£¡£¡£¡£¡£¹ÌÈ»MicrosoftÔøÓÚ2020Äê°ä²¼²¹¶¡£¡£¡£¡£¡£¬£¬ £¬£¬£¬£¬£¬µ«²¿ÃÅ°æ±¾²¹¶¡²»ÆëÈ«»ò±»»Ø¹ö£¬£¬ £¬£¬£¬£¬£¬×îÐÂWindows 11ϵͳÈԿɱ»ÀûÓᣡ£¡£¡£¡£¹¥»÷Õß¿ÉÔÚ±¾µØ´¥·¢·ì϶»ñȡϵͳ×î¸ßȨÏÞ¡£¡£¡£¡£¡£


¶þ¡¢Ó°ÏìÁìÓò


Windows >= ËùÓÐÒÑ°ä²¼°æ±¾


Èý¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


ÔÝÎÞ£¬£¬ £¬£¬£¬£¬£¬Çë³ÖÐø¹Ø×¢Microsoft ¹Ù·½°²È«²¼¸æ£¬£¬ £¬£¬£¬£¬£¬¾¡¿ìÀûÓÃÕýʽ°ä²¼µÄÀÛ»ý°²È«¸üлò²¹¶¡£¡£¡£¡£¡£¬£¬ £¬£¬£¬£¬£¬È·±£ cldflt.sys Çý¶¯·ì϶µÃµ½ÆëÈ«½¨¸´¡£¡£¡£¡£¡£


3.2 Ò»Ê±´ëÊ©


ÔÝÎÞ¡£¡£¡£¡£¡£


3.3 ͨÓý¨Òé


¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¡£¡£¡£¡£¬£¬ £¬£¬£¬£¬£¬Ï÷¼õϵͳ·ì϶£¬£¬ £¬£¬£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£¡£


¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔ죬£¬ £¬£¬£¬£¬£¬Åú¸Ä·À»ðǽսÊõ£¬£¬ £¬£¬£¬£¬£¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬£¬ £¬£¬£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬£¬ £¬£¬£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£¡£

ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬£¬ £¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£¡£


¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬ £¬£¬£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò£¬£¬ £¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£

ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://github.com/Nightmare-Eclipse/MiniPlasma/

https://nvd.nist.gov/vuln/detail/cve-2020-17103