CVE:CVE-2010-3147
CNNVD:CNNVD-201008-352
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows XP SP2和SP3，Windows Server 2003 SP2，Windows Vista SP1和SP2，Windows Server 2008 Gold，SP2和R2，以及Windows 7中的Windows Address Book中的wab.exe 6.00.2900.5512中存在不可信搜索路径漏洞。本地用户和远程攻击者可以借助与.wab或.p7c文件在同一文件夹下的wab32res.dll木马执行任意代码和DLL劫持攻击。
solution:Upgrade microsoft outlook_express to a higher version than 6.00.2900.5512,and avoid the version 6.00.2900.5512; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_7 to a higher version than *,-; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:r2,*:sp2,-:sp2,and avoid the version *:r2,*:sp2,-:sp2; Upgrade microsoft windows_vista to a higher version than *:sp1,*:sp2,-:sp1,and avoid the version *:sp1,*:sp2,-:sp1; Upgrade microsoft windows_xp to a higher version than *:sp3,-:sp2,and avoid the version *:sp3,-:sp2