CVE:CVE-2010-1734
CNNVD:CNNVD-201005-072
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows 2000, XP, 以及Server内核的win32k.sys的SfnINSTRING函数存在漏洞，本地用户可给PostMessage函数调用DDEMLEvent窗口的第二个参数(即Msg参数)赋Ox18d值，引发拒绝服务(系统崩溃)。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:beta3,*:gold,*:rc1,*:rc2,*:sp1,*:sp2,*:sp3,*:sp4,-,and avoid the version *:beta3,*:gold,*:rc1,*:rc2,*:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than *:gold,*:r2,*:sp1,*:sp2,and avoid the version *:gold,*:r2,*:sp1,*:sp2; Upgrade microsoft windows_server_2003 to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,*:sp3,-,-:gold,-:sp1,-:sp2,-:sp3,sp3,sp3:unknown,and avoid the version *:gold,*:sp1,*:sp2,*:sp3,-:gold,-:sp1,-:sp2,-:sp3,sp3,sp3:unknown