CVE:CVE-2017-0283
CNNVD:CNNVD-201706-492
Microsoft Windows Server 2008 SP2等都是美国微软（Microsoft）公司的产品。Microsoft Windows Server 2008 SP2是一套用于服务器的操作系统；Microsoft Office 2007是一套办公软件；Microsoft Lync是一个企业整合沟通平台。Uniscribe（又名Unicode Script Processor）是其中的一个能够使Windows操作系统正确演示Unicode文字的组件。
多款Microsoft Windows产品中的Uniscribe存在远程代码执行漏洞。 远程攻击者可利用该漏洞在当前用户的上下文中执行任意代码或造成拒绝服务。以下产品和版本受到影响：Microsoft Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Windows 8.1，Windows Server 2012 Gold和R2，Windows RT 8.1，Windows 10，Windows 10版本1511，Windows 10版本1607，Windows Server 2016；Microsoft Office 2007 SP3，Microsoft Office 2010 SP2，Microsoft Office Word Viewer；Microsoft Lync 2013 SP1；Skype for Business 2016；Microsoft Silverlight 5 Developer Runtime。
solution:Upgrade microsoft lync to a higher version than 2013:sp1,and avoid the version 2013:sp1; Upgrade microsoft office to a higher version than 2007:sp3,2010:sp2,and avoid the version 2007:sp3,2010:sp2; Upgrade microsoft office_word_viewer to a higher version than -; Upgrade microsoft silverlight to a higher version than 5.0,and avoid the version 5.0; Upgrade microsoft skype_for_business to a higher version than 2016,and avoid the version 2016; Upgrade microsoft windows_10 to a higher version than *,1511,1607,1703,and avoid the version 1511,1607,1703; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than *,rt,and avoid the version rt; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -