CVE:CVE-2009-2507
CNNVD:CNNVD-200910-217
A certain  control in the  in Microsoft Windows 2000 SP4, XP SP2 和 SP3, 和Server 2003 SP2的索引服务中的某个ActiveX控件没有使当地处理URLs，这会允许远程攻击者可以借助未明向量，且该向量能触发"双重漏洞"来加载和运行，来执行任意程序。该漏洞又称"索引服务内存破坏漏洞"。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,-:sp2,and avoid the version *:sp2,*:sp3,-:sp2