CVE:CVE-2008-1087
CNNVD:CNNVD-200804-108
Microsoft Windows 2000 SP4,XP SP2,Server 2003 SP1和SP2,Vista,以及Server 2008中的GDI存在栈缓冲区溢出漏洞。远程攻击者借助一个带有特制的文件名参数的EMF图像，执行任意代码。该漏洞又称"GDI栈缓冲区溢出漏洞" 。
solution:Upgrade microsoft windows-nt to a higher version than 2008,and avoid the version 2008; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_vista to a higher version than *; Upgrade microsoft windows_xp to a higher version than *,*:sp2,and avoid the version *:sp2