CVE:CVE-2009-0087
CNNVD:CNNVD-200904-279
写字板是Windows操作系统中附件所提供的简单文本编辑工具。
如果用户打开了包含有畸形数据的特制Word 6文件的话，写字板和Microsoft Office中的内存破坏漏洞可能导致执行任意代码。
solution:Upgrade microsoft office_word to a higher version than 2000:sp3,2002:sp3,and avoid the version 2000:sp3,2002:sp3; Upgrade microsoft windows_2000 to a higher version than -:sp4,and avoid the version -:sp4; Upgrade microsoft windows_2003_server to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_xp to a higher version than *,*:sp2,*:sp3,and avoid the version *:sp2,*:sp3