CVE:CVE-2004-0893
CNNVD:CNNVD-200501-216
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
WinNT 4.0、Win2000、WinXP及Win2003的内核存在用户权限提升漏洞。
由于内核中本地过程调用(LPC)接口不能正确验证发送给LPC端口的信息长度，可导致本地用户权限增加， 也称为"Windows内核漏洞"。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than datacenter_64-bit:sp1_beta_1,enterprise,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1_beta_1,r2,r2:sp1_beta_1,standard,standard:sp1_beta_1,web,web:sp1_beta_1,and avoid the version datacenter_64-bit:sp1_beta_1,enterprise,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1_beta_1,r2,r2:sp1_beta_1,standard,standard:sp1_beta_1,web,web:sp1_beta_1; Upgrade microsoft windows_nt to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2