CVE:CVE-2014-4077
CNNVD:CNNVD-201411-128
Microsoft IME是美国微软（Microsoft）公司的一套输入法。
在受攻击的沙盒应用程序使用Microsoft IME（日语）时，导致Microsoft IME（日语）中存在特权提升漏洞。以下产品和版本受到影响：Microsoft Windows Server 2003 SP2，Windows Vista SP2，Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Office 2007 SP3。
solution:Upgrade microsoft office to a higher version than 2007:sp3,and avoid the version 2007:sp3; Upgrade microsoft windows_7 to a higher version than *:sp1,and avoid the version *:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,r2:sp1,and avoid the version *:sp2,r2:sp1; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2