CVE:CVE-2005-0044
CNNVD:CNNVD-200505-302
Microsoft COM提供多个对象存储在一个文档中；使用Microsoft OLE技术，应用程序可提供嵌入和链接支持。
Microsoft COM和OLE存在安全问题，本地或远程攻击者可以利用这个漏洞提升特权及执行任意指令。
solution:Upgrade microsoft exchange_server to a higher version than 5.0,and avoid the version 5.0; Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than enterprise,enterprise_64-bit,r2,standard,web,and avoid the version enterprise,enterprise_64-bit,r2,standard,web; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2