CVE:CVE-2010-0805
CNNVD:CNNVD-201003-514
基于Windows XP SP2，SP3和6 SP1的Microsoft Internet Explorer 5.01 SP4和6版本中的Tabular Data Control (TDC) ActiveX控件中存在任意代码执行漏洞。远程攻击者可借助能触发CTDCCtl::SecurityCHeckDataURL函数内存破坏的超长URL(DataURL参数)执行任意代码。
solution:Upgrade microsoft internet_explorer to a higher version than 5.01:sp4,6:sp1,6,and avoid the version 5.01:sp4,6:sp1,6; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3