CVE:CVE-2009-1127
CNNVD:CNNVD-200911-123
Microsoft Windows 2000 SP4, XP SP2和SP3, Server 2003 SP2, Vista Gold, SP1和SP2以及Server 2008 Gold和SP2的内核中的win32k.sys没有正确的验证提交到未明系统调用的参数，这使得本地用户可以借助特制的会触发空指针引用的应用程序，获得特权。又称"Win32k空指针应用漏洞"。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-:gold,-:sp2,and avoid the version *:sp2,-:gold,-:sp2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,-:sp2,and avoid the version *:sp2,*:sp3,-:sp2