CVE:CVE-2008-1457
CNNVD:CNNVD-200808-190
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
多个版本的Windows事件系统(2000 SP4, XP SP2及SP3, Server 2003 SP1及SP2, Vista Gold及SP1,Server 2008)在创建用户订阅时没有正确地验证订阅请求，导致权限提升漏洞。
系统认证用户可利用特定的事件订阅请求执行任意代码。
solution:Upgrade microsoft windows-nt to a higher version than 2008,vista,xp:sp3,and avoid the version 2008,vista,xp:sp3; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than *:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_vista to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_xp to a higher version than *:sp2,and avoid the version *:sp2