CVE:CVE-2010-0027
CNNVD:CNNVD-201001-245
Microsoft Internet Explorer是美国微软（Microsoft）公司发布的Windows操作系统中默认捆绑的Web浏览器。Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Internet Explorer 5.01、6、6 SP1、7及8版本中的URL验证功能，以及Windows 2000 SP4，XP SP2和SP3，Server 2003 SP2版本中的ShellExecute API函数不能正确处理输入参数。远程攻击者可借助特制URL执行任意本地程序。
solution:Upgrade microsoft internet_explorer to a higher version than 8,8.0.6001,7,7.0,7.0.5730:unknown,7.0.5730.11,7.00.5730.1100,7.00.6000.16386,7.00.6000.16441,5.01:sp4,6,6:sp1,and avoid the version 8,8.0.6001,7,7.0,7.0.5730:unknown,7.0.5730.11,7.00.5730.1100,7.00.6000.16386,7.00.6000.16441,5.01:sp4,6,6:sp1; Upgrade microsoft windows_7 to a higher version than -; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:r2,*:sp2,and avoid the version *:r2,*:sp2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,-:sp2,and avoid the version *:sp2,*:sp3,-:sp2; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2