CVE:CVE-2006-3351
CNNVD:CNNVD-200607-022
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows的Shell程序explorer.exe在处理包含畸形数据的".url"文件时存在问题，本地攻击者可能利用此漏洞导致用户机器上的explorer.exe进程崩溃。
如果explorer.exe解析了包含有特别格式URL的*.url文件的话，就会导致崩溃。即使通过资源管理器试图删除这个文件时也会触发崩溃。
solution:Upgrade microsoft windows_2003_server to a higher version than 3.1.0.3270,64-bit,datacenter_64-bit:sp1,datacenter_64-bit:sp1_beta_1,datacenter_edition,datacenter_edition:sp1,datacenter_edition:sp1_beta_1,datacenter_edition_64-bit,datacenter_edition_64-bit:sp1,datacenter_edition_64-bit:sp1_beta_1,enterprise,enterprise:sp1,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1,enterprise_64-bit:sp1_beta_1,enterprise_edition:sp1,enterprise_edition:sp1_beta_1,enterprise_edition_64-bit,enterprise_edition_64-bit:sp1,enterprise_edition_64-bit:sp1_beta_1,itanium,r2,r2:sp1,r2:sp1_beta_1,sp1,standard,standard:sp1,standard:sp1_beta_1,standard_64-bit,web,web:sp1,web:sp1_beta_1,and avoid the version 3.1.0.3270,64-bit,datacenter_64-bit:sp1,datacenter_64-bit:sp1_beta_1,datacenter_edition,datacenter_edition:sp1,datacenter_edition:sp1_beta_1,datacenter_edition_64-bit,datacenter_edition_64-bit:sp1,datacenter_edition_64-bit:sp1_beta_1,enterprise,enterprise:sp1,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1,enterprise_64-bit:sp1_beta_1,enterprise_edition:sp1,enterprise_edition:sp1_beta_1,enterprise_edition_64-bit,enterprise_edition_64-bit:sp1,enterprise_edition_64-bit:sp1_beta_1,itanium,r2,r2:sp1,r2:sp1_beta_1,sp1,standard,standard:sp1,standard:sp1_beta_1,standard_64-bit,web,web:sp1,web:sp1_beta_1; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,ibm_oem_version,ibm_oem_version:sp1,and avoid the version *:gold,*:sp1,*:sp2,ibm_oem_version,ibm_oem_version:sp1