CVE:CVE-2009-2511
CNNVD:CNNVD-200910-219
Microsoft Windows 2000 SP4, Windows XP SP2 和 SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, 和SP2, Windows Server 2008 Gold, SP2, 和 R2, 和 Windows 7的 CryptoAPI组件存在整数值溢出。它允许中间人攻击者可以借助具有畸形的ASN.1 Object的 Identifier (OID)X.509证书，骗取SSL服务器和其他权限。该漏洞又称"整数值溢出 X.509 Object Identifiers漏洞"。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_7 to a higher version than -; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:r2,*:sp2,and avoid the version *:r2,*:sp2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3