CVE:CVE-2019-1161
CNNVD:CNNVD-201908-1017
Microsoft Forefront Endpoint Protection等都是美国微软（Microsoft）公司的产品。Microsoft Forefront Endpoint Protection是一套端点安全防护软件。Microsoft Security Essentials是一套免费的杀毒软件。Microsoft Windows Defender是一套Windows系统附带的防病毒软件。
多款Microsoft产品中存在权限许可和访问控制问题漏洞，该漏洞源于用于Defender的MpSigStub.exe文件允许删除任意地址中的文件。攻击者可通过登录到系统并运行特制的命令利用该漏洞删除被保护的文件。以下产品及版本受到影响：Microsoft Forefront Endpoint Protection 2010；Microsoft Security Essentials；Microsoft System Center 2012 Endpoint Protection，Microsoft System Center 2012 R2 Endpoint Protection，Microsoft System Center Endpoint Protection；Windows Defender。
solution:Upgrade microsoft windows_defender to a higher version than -; Upgrade microsoft forefront_endpoint_protection_2010 to a higher version than -; Upgrade microsoft security_essentials to a higher version than -; Upgrade microsoft system_center_endpoint_protection to a higher version than *,2012,2012:r2,and avoid the version 2012,2012:r2