CVE:CVE-2012-0165
CNNVD:CNNVD-201205-139
Microsoft Windows Vista是是美国微软（Microsoft）公司发布的一套操作系统。
Microsoft Windows Vista SP2，Server 2008 SP2和Office 2003 SP3，2007 SP2和SP3与2010 Gold和SP1中的GDI+中存在漏洞，该漏洞源于未正确验证EMF图片中的记录类型。远程攻击者可利用该漏洞借助特制图像执行任意代码，也称“GDI+记录类型漏洞”。
solution:Upgrade microsoft office to a higher version than 2003:sp3,2007:sp2,2007:sp3,2010,2010:sp1,and avoid the version 2003:sp3,2007:sp2,2007:sp3,2010,2010:sp1; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,and avoid the version -:sp2; Upgrade microsoft windows_vista to a higher version than -:sp2,and avoid the version -:sp2