CVE:CVE-2005-0058
CNNVD:CNNVD-200508-085
Microsoft Windows是微软发布的非常流行的操作系统，其中的Telephony服务提供电话应用程序编程接口(TAPI)支持。
Windows系统电话应用编程接口(TAPI)中的漏洞允许攻击者完全控制受影响的系统。在Windows 2000 Server上，任何匿名用户都可以通过发送特制消息来利用这个漏洞；在Windows Server 2003上，Telephony服务仅限于通过认证的用户帐号；在Windows 2000 Professional和Windows XP上，攻击者必需本地登陆到系统并运行程序才能利用这个漏洞。
solution:Upgrade microsoft windows_2000 to a higher version than *; Upgrade microsoft windows_2003_server to a higher version than r2,and avoid the version r2; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *:gold,and avoid the version *:gold