CVE:CVE-2010-3144
CNNVD:CNNVD-201008-349
Microsoft Windows XP SP2和SP3，及Server 2003 SP2的Internet Connection Signup Wizard中存在不安全库加载漏洞。本地用户可以借助当前工作目录中的smmscrpt.dll木马文件获取特权。
solution:Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2