CVE:CVE-2010-4398
CNNVD:CNNVD-201012-042
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows XP，Windows Server 2003，Windows Vista，Windows Server 2008至R2的版本，以及Windows 7中的win32k.sys系统文件中的RtlQueryRegistryValues函数中存在基于栈的缓冲区溢出漏洞。本地用户可借助SystemDefaultEUDCFont注册码中的特制REG_BINARY值获得特权并绕过用户账户控制(UAC)功能。
solution:Upgrade microsoft windows_2003_server to a higher version than *; Upgrade microsoft windows_7 to a higher version than *; Upgrade microsoft windows_server_2008 to a higher version than *,r2,and avoid the version r2; Upgrade microsoft windows_vista to a higher version than *; Upgrade microsoft windows_xp to a higher version than *