CVE:CVE-2009-2496
CNNVD:CNNVD-200908-145
2007 Microsoft办公室系统的Microsoft Office XP SP3， Office 2003 SP3， Office XP Web 组件SP3， Office 2003 Web组件SP3， Office 2003 Web组件SP1的Office Web Components ActiveX 控件，工业标准结构 (ISA) Server 2004 SP3 和2006 SP1， 以及Office Small Business Accounting 2006中存在基于堆缓冲区溢出 ， 该漏洞会允许远程攻击者通过对未明路径的未明向量来注入任意代码，该漏洞又称作 "Office Web 组件堆损耗漏洞 "。
solution:Upgrade microsoft biztalk_server to a higher version than 2002,and avoid the version 2002; Upgrade microsoft internet_security_and_acceleration_server to a higher version than 2004:sp3,2006:sp1,and avoid the version 2004:sp3,2006:sp1; Upgrade microsoft office to a higher version than -,2003:sp3,xp:sp3,and avoid the version 2003:sp3,xp:sp3; Upgrade microsoft office_web_components to a higher version than 2000:sp3,2003:sp1,2003:sp3,xp:sp3,and avoid the version 2000:sp3,2003:sp1,2003:sp3,xp:sp3; Upgrade microsoft visual_studio_.net to a higher version than 2003:sp1,and avoid the version 2003:sp1