CVE:CVE-2009-0086
CNNVD:CNNVD-200904-278
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows HTTP服务处理远程Web服务器所返回的特定值的方式存在整数下溢漏洞。如果用户受骗访问了恶意服务器的话，就可以触发这个溢出，导致在用户机器上执行任意代码。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_server_2003 to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_server_2008 to a higher version than *; Upgrade microsoft windows_vista to a higher version than *,*:sp1,gold,and avoid the version *:sp1,gold; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3