CVE:CVE-2012-1870
CNNVD:CNNVD-201207-098
Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。
Microsoft Windows XP SP2和SP3，Windows Server 2003 SP2，Windows Vista SP2，Windows Server 2008 SP2、R2、R2 SP1，Windows 7 Gold和SP1，及其他产品中的TLS协议中的CBC模式中存在信息泄露漏洞。远程web服务器可利用该漏洞通过触发多个请求到第三方HTTPS服务器及在嗅探网络期间产生HTTPS会话，获取明文数据，又名‘TLS协议漏洞’。
solution:Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,r2,and avoid the version *:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2