CVE-2017-20201— CCleaner和CCleaner Cloud 安全漏洞
一分钟漏洞结论
影响对象
Piriform CCleaner
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
CCleaner和CCleaner Cloud都是英国CCleaner公司的产品。CCleaner是一款系统清理与优化软件。CCleaner Cloud是一款云端系统清理与优化软件。 CCleaner v5.33.6162版本和CCleaner Cloud v1.07.3191版本存在安全漏洞，该漏洞源于恶意预入口点加载器执行内存有效载荷，可能导致远程数据收集和渗漏。
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2017-20201 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
CCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise
来源: CVE Program / CVE List V5
Vulnerability Description
CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 (32-bit builds) contained a malicious pre-entry-point loader that diverts execution from __scrt_common_main_seh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at runtime, and transfers execution to an in-memory payload. The payload performs anti-analysis checks, gathers host telemetry, encodes the data with a two-stage obfuscation, and attempts HTTPS exfiltration to hard-coded C2 servers or month-based DGA domains. Potential impacts include remote data collection and exfiltration, stealthy in-memory execution and persistence, and potential lateral movement. CCleaner was developed by Piriform, which was acquired by Avast in July 2017; Avast later merged with NortonLifeLock to form the parent company now known as Gen Digital. According to vendor advisories, the compromised CCleaner build was released on August 15, 2017 and remediated on September 12, 2017 with v5.34; the compromised CCleaner Cloud build was released on August 24, 2017 and remediated on September 15, 2017 with v1.07.3214.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
内嵌的恶意代码
来源: CVE Program / CVE List V5
Vulnerability Title
CCleaner和CCleaner Cloud 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
CCleaner和CCleaner Cloud都是英国CCleaner公司的产品。CCleaner是一款系统清理与优化软件。CCleaner Cloud是一款云端系统清理与优化软件。 CCleaner v5.33.6162版本和CCleaner Cloud v1.07.3191版本存在安全漏洞，该漏洞源于恶意预入口点加载器执行内存有效载荷，可能导致远程数据收集和渗漏。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Piriform | CCleaner | 5.33.6162 | - |
|
| Piriform | CCleaner Cloud | 1.07.3191 | - |
|
二、漏洞 CVE-2017-20201 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2017-20201 的情报信息
请登录查看更多情报信息。
CVE-2017-20201 其他参考 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2017-20201
暂无评论