CVE:CVE-2012-1527
CNNVD:CNNVD-201211-218
Microsoft Windows Shell是美国微软（Microsoft）公司的一个Windows系统下与用户交互的界面，它允许用户执行公共的任务，如访问文件系统、导出执行程序和改变系统设置等。
Microsoft Windows XP SP2和SP3、Windows Server 2003 SP2、Windows Vista SP2、Windows Server 2008 SP2、R2、R2 SP1、Windows 7 Gold和SP1、Windows 8、Windows Server 2012 版本中的Windows Shell中存在整数上溢漏洞。本地攻击者利用该漏洞通过特制的公文包获得特权。又名‘Windows Briefcase整数上溢漏洞’。
solution:Upgrade microsoft windows_7 to a higher version than *,*:sp1,and avoid the version *:sp1; Upgrade microsoft windows_8 to a higher version than -; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:r2,*:sp2,and avoid the version *:r2,*:sp2; Upgrade microsoft windows_server_2012 to a higher version than -; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2