CVE:CVE-2009-0081
CNNVD:CNNVD-200903-188
Windows是Microsoft公司开发的图形用户界面操作系统，是目前最为普遍使用的个人计算机系统部署的操作系统。                              
Microsoft Windows 2000 SP4,XP SP2和SP3,Server 2003 SP1和SP2,Vista Gold以及SP1,和Server的内核中的图形装置界面(GDI)，没有试点各地教研从用户模式中接收的输入，这会允许远程攻击者可以借助一个特制的(1) Windows Metafile(又称WMF)或(2)增强的Metafile(又称EMF)图像文件,又称"Windows 内核输入校验漏洞"，执行任意代码。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_server_2003 to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_server_2008 to a higher version than *; Upgrade microsoft windows_vista to a higher version than *,*:sp1,gold,and avoid the version *:sp1,gold; Upgrade microsoft windows_xp to a higher version than *,*:sp2,*:sp3,and avoid the version *:sp2,*:sp3