CVE:CVE-2001-0628
CNNVD:CNNVD-200108-073
Microsoft Word 2000版本不检查宏的AutoRecovery (.asd)文件，本地攻击者可以执行任意带有Word用户的用户ID的宏。
solution:Upgrade microsoft word to a higher version than 2000,and avoid the version 2000
solution:Upgrade citrix metaframe to a higher version than xp_server_service_pack_1,1.8:sp3,xp_server,and avoid the version (,xp_server_service_pack_1],1.8:sp3,xp_server