CVE:CVE-2009-1216
CNNVD:CNNVD-200904-018
当在gunzip,gzip,pack,pcat,7.0.1701.48之前的unpack 7.x,8.0.1969.62之前的8.x，以及9.0.3790.2076之前的9.x版本中使用时，UNIX 3.0和3.5版本的Microsoft Windows Server 2008和UNIX-based Applications (SUA)的子系统的gzip库中的(1)unlzh.c和(2)unpack.c存在多个未明漏洞。远程攻击者可以借助未知向量，执行任意代码。
solution:Upgrade microsoft subsystem_for_unix-based_applications to a higher version than *; Upgrade microsoft windows_services_for_unix to a higher version than 3.0,3.5,and avoid the version 3.0,3.5; Upgrade microsoft windows_server_2008 to a higher version than *; Upgrade microsoft windows_vista to a higher version than *