CVE:CVE-2003-0659
CNNVD:CNNVD-200311-043
Windows NT到Server 2003版本中User32.dll文件的一个函数存在缓冲区溢出漏洞。本地用户可以通过可享有特权应用程序中超长的(1) ListBox的LB_DIR消息或 (2) ComboBox的CB_DIR消息执行任意代码。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than enterprise,enterprise_64-bit,r2,standard,web,and avoid the version enterprise,enterprise_64-bit,r2,standard,web; Upgrade microsoft windows_nt to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,and avoid the version *:gold,*:sp1