CVE:CVE-2010-3227
CNNVD:CNNVD-201010-393
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows mfc42.dll库中CFrameWnd类的UpdateFrameTitleForDocument()函数在更新文档标题时存在栈溢出漏洞，用户受骗打开了恶意的档案文件并向该函数传送了超长的标题字符串参数就可以触发这个漏洞，导致执行任意代码。
solution:Upgrade microsoft windows_7 to a higher version than *; Upgrade microsoft windows_server_2003 to a higher version than -:sp2,and avoid the version -:sp2; Upgrade microsoft windows_server_2008 to a higher version than -:r2,-:sp2,and avoid the version -:r2,-:sp2; Upgrade microsoft windows_vista to a higher version than -:sp1,-:sp2,and avoid the version -:sp1,-:sp2; Upgrade microsoft windows_xp to a higher version than -,sp3,and avoid the version sp3