CVE:CVE-2008-1436
CNNVD:CNNVD-200804-313
Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。
Microsoft Windows 存在权限许可和访问控制漏洞，如果本地攻击者能够通过IIS(ASP.NET代码以完全可信任权限运行或通过ISAPI扩展/过滤器运行)和SQL Server(可以管理权限加载和运行代码)在已认证的环境中运行代码的话，就可能以LocalSystem权限执行任意指令。
solution:Upgrade microsoft windows-nt to a higher version than vista:sp1,vista:sp2,and avoid the version vista:sp1,vista:sp2; Upgrade microsoft windows_server_2003 to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_server_2008 to a higher version than *; Upgrade microsoft windows_vista to a higher version than *,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_xp to a higher version than *:sp2,and avoid the version *:sp2