CVE:CVE-2006-6696
CNNVD:CNNVD-200612-471
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows客户端/服务器运行时子系统(CSRSS)进程处理错误消息的方式存在一个远程执行指令漏洞。攻击者可以通过构建特制的应用程序来利用此漏洞，远程执行代码。此外，如果用户查看特制的网站，成功利用此漏洞的攻击者可以完全控制受影响的系统。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than datacenter_edition,datacenter_edition:sp1,datacenter_edition:sp1_beta_1,enterprise_edition:sp1,enterprise_edition:sp1_beta_1,sp1,standard,standard:sp1,standard:sp1_beta_1,web,web:sp1,web:sp1_beta_1,and avoid the version datacenter_edition,datacenter_edition:sp1,datacenter_edition:sp1_beta_1,enterprise_edition:sp1,enterprise_edition:sp1_beta_1,sp1,standard,standard:sp1,standard:sp1_beta_1,web,web:sp1,web:sp1_beta_1; Upgrade microsoft windows_vista to a higher version than *,*:beta,*:beta1,*:beta2,and avoid the version *:beta,*:beta1,*:beta2; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2