CVE:CVE-2009-0562
CNNVD:CNNVD-200908-127
Microsoft Office XP SP3， Office 2003 SP3， Office XP Web Components SP3， Office 2003 Web Components SP3， 2007 Microsoft Office System的Office 2003 Web Components SP1， 工业标准结构 (ISA) 服务器 2004 SP3 和 2006 SP1， 以及 Office Small Business Accounting 2006中的Office Web Components ActiveX控件不会很好地分配内存，这回允许远程攻击者通过可以触发"系统状态"损耗的未明向量来执行任意代码，它又称作 "Office Web 组件内存分配代码执行漏洞"。
solution:Upgrade microsoft isa_server to a higher version than 2004:sp3,2006:sp1,and avoid the version 2004:sp3,2006:sp1; Upgrade microsoft office to a higher version than -,2003:sp3,xp:sp3,and avoid the version 2003:sp3,xp:sp3; Upgrade microsoft office_web_components to a higher version than 2000:sp3,2003:sp1,2003:sp3,xp:sp3,and avoid the version 2000:sp3,2003:sp1,2003:sp3,xp:sp3