CVE:CVE-2018-0817
CNNVD:CNNVD-201803-527
Microsoft Windows Server 2008 SP2等都是美国微软（Microsoft）公司的一系列操作系统。Windows Graphics Device Interface（GDI）是其中的一个应用程序接口，它的主要任务是负责系统与绘图程序之间的信息交换，以及处理所有Windows程序的图形输出。
Microsoft Windows GDI中存在提权漏洞。本地攻击者可利用该漏洞在内核模式下执行任意代码。以下系统版本受到影响：Microsoft Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Windows 8.1和RT 8.1，Windows Server 2012和R2，Windows 10，Windows 10版本1511，，Windows 10版本1607，Windows 10版本1703，Windows 10版本1709，Windows Server 2016，Windows Server版本1709。
solution:Upgrade microsoft windows_10 to a higher version than -,1511,1607,1703,1709,and avoid the version 1511,1607,1703,1709; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than *; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -,1709,and avoid the version 1709