CVE:CVE-2006-0012
CNNVD:CNNVD-200604-156
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows资源管理器处理COM对象的方式存在远程代码执行漏洞，成功利用这个漏洞的攻击者可以完全控制受影响系统。攻击者必须诱骗用户访问强制到远程文件服务器连接的站点，然后这个远程文件服务器就可以导致Windows资源管理器失效，可能允许代码执行。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than datacenter_64-bit:sp1,enterprise,enterprise:sp1,enterprise_64-bit,enterprise_64-bit:sp1,r2,r2:sp1,standard,standard:sp1,standard_64-bit,web,web:sp1,and avoid the version datacenter_64-bit:sp1,enterprise,enterprise:sp1,enterprise_64-bit,enterprise_64-bit:sp1,r2,r2:sp1,standard,standard:sp1,standard_64-bit,web,web:sp1; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2