CVE:CVE-2003-0897
CNNVD:CNNVD-200311-084
Windows XP的CommCtl32.dll存在“打破”漏洞。本地用户通过发送(1) BCM_GETTEXTMARGIN或(2) BCM_SETTEXTMARGIN按钮控制消息给享有特权的应用程序执行任意代码。
solution:Upgrade microsoft windows_xp to a higher version than *:gold,and avoid the version *:gold