CVE:CVE-2010-0252
CNNVD:CNNVD-201002-104
Microsoft Data Analyzer ActiveX控件允许从基于COM的开发应用程序(如Visual Basic)以编程方式控制Data Analyzer。
ActiveX控件存在栈破坏漏洞。在Internet Explorer中实例化Microsoft Data Analyzer ActiveX控件(max3activex.dll)时，该控件可能会破坏栈状态，导致执行任意代码。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,-:sp2,and avoid the version *:sp2,*:sp3,-:sp2; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_vista to a higher version than *:sp1,*:sp2,-:sp1,-:sp2,and avoid the version *:sp1,*:sp2,-:sp1,-:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-:sp2,r2,and avoid the version *:sp2,-:sp2,r2; Upgrade microsoft windows_7 to a higher version than -