CVE:CVE-2013-3906
CNNVD:CNNVD-201311-073
Microsoft Windows、Office、Office Compatibility Pack SP3和Lync都是美国微软（Microsoft）公司的产品。Windows是一系列操作系统。Office是一款办公软件套件。Office Compatibility Pack SP3是一款Office兼容包。Lync（前称Microsoft Office Communicator）是一套企业整合沟通平台。
Microsoft Windows, Microsoft Office和Microsoft Lync所包含的图形组件(GDI+)存在远程代码执行漏洞。远程攻击者可通过构造特制的TIFF图像利用该漏洞执行任意代码。以下产品及版本受到影响：Microsoft Windows Vista SP2和Server 2008 SP2；Office 2003 SP3，2007 SP3，2010 SP1和SP2；Office Compatibility Pack SP3；Lync 2010, 2010 Attendee，2013；Basic 2013。
solution:Upgrade microsoft office to a higher version than 2003:sp3,2007:sp3,2010:sp1,2010:sp2,and avoid the version 2003:sp3,2007:sp3,2010:sp1,2010:sp2; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft lync to a higher version than 2010,2013,and avoid the version 2010,2013; Upgrade microsoft lync_basic to a higher version than 2013,and avoid the version 2013