CVE:CVE-2011-3408
CNNVD:CNNVD-201112-207
csrss.exe系统进程是微软客户端、服务端运行时子系统，管理Windows图形相关任务。
Microsoft Windows CSRSS在实现上存在本地权限提升漏洞。本地攻击者可利用该漏洞以管理员权限执行任意代码。
solution:Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,-:sp2,r2,and avoid the version *:sp2,-:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2