CVE:CVE-2010-4701
CNNVD:CNNVD-201101-296
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows XP Professional SP3，Server 2003 R2 Enterprise Edition SP2，以及Windows 7 Professional中的Microsoft Windows Fax Services Cover Page Editor 5.2 r2版本中的fxscover.exe中的CDrawPoly::Serialize函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可以借助Fax Cover Page(.cov)文件中的超长记录执行任意代码。
solution:Upgrade microsoft windows_2003_server to a higher version than *:r2_sp2,and avoid the version *:r2_sp2; Upgrade microsoft windows_7 to a higher version than *; Upgrade microsoft windows_xp to a higher version than *:sp3,and avoid the version *:sp3