CVE:CVE-2012-0013
CNNVD:CNNVD-201201-115
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows多个版本的Windows Packager配置中存在黑名单不完全漏洞。攻击者利用该漏洞借助特制的ClickOnce应用程序在Microsoft Office文档和相关的应用程序文件中执行任意代码，又名“编译执行漏洞”。Microsoft Windows XP SP2 和 SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, 以及Windows 7 Gold and SP1中存在该漏洞。
solution:Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,-:sp2,r2,and avoid the version *:sp2,-:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3