CVE:CVE-2009-2653
CNNVD:CNNVD-200908-028
Microsoft Windows Server 2003是美国微软（Microsoft）公司的一个服务器操作系统。
** DISPUTED **  The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location.  NOTE: the vendor disputes the significance of this report, stating that 'the Administrator to SYSTEM "escalation" is not a security boundary we defend.'
solution:Upgrade microsoft windows_server_2003 to a higher version than *; Upgrade microsoft windows_xp to a higher version than -:sp2,-:sp3,and avoid the version -:sp2,-:sp3