CVE:CVE-2011-0032
CNNVD:CNNVD-201103-142
基于Microsoft Windows Vista SP1和SP2, Windows 7 Gold和SP1, Windows Server 2008 R2和R2 SP1中的DirectShow和基于Windows Vista的Windows Media Center TV Pack中存在不可信搜索路径漏洞。本地用户可以借助当前工作目录下的Trojan木马DLL获取特权。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。
solution:Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2008 to a higher version than r2,and avoid the version r2; Upgrade microsoft windows_vista to a higher version than *:sp1,*:sp2,*,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_media_center_tv_pack to a higher version than *