CVE:CVE-2011-1247
CNNVD:CNNVD-201110-183
Microsoft Windows XP是美国微软（Microsoft）公司开发和维护的一套供个人电脑使用的操作系统。
Microsoft Windows XP SP2和SP3版本, Windows Server 2003 SP2版本, Windows Vista SP2版本, Windows Server 2008 SP2版本, R2版本以及R2 SP1版本和Windows 7 Gold版本，SP1版本中的Microsoft Active Accessibility组件存在不可信搜索路径漏洞。本地用户可以借助当前工作目录中的特洛伊木马DLL提升特权。
solution:Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,-:sp2,r2,and avoid the version *:sp2,-:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,-:sp2,and avoid the version *:sp2,-:sp2