CVE:CVE-2011-2003
CNNVD:CNNVD-201110-199
Microsoft Windows XP是美国微软（Microsoft）公司开发和维护的一套供个人电脑使用的操作系统。
Microsoft Windows XP SP2和SP3版本, Windows Server 2003 SP2版本, Windows Vista SP2版本, Windows Server 2008 SP2, R2和R2 SP1版本以及Windows 7 Gold和SP1版本中的kernel-mode驱动的win32k.sys在.fon字体文件的处理上存在远程代码执行漏洞。远程攻击者可利用此漏洞以内核权限执行任意代码，导致完全控制受影响计算机。
solution:Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,-:sp2,r2,and avoid the version *:sp2,-:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2