CVE:CVE-2011-0037
CNNVD:CNNVD-201102-376
Microsoft Malware Protection Engine是微软反恶意软件产品的一部分。
用于Microsoft Malicious Software Removal Tool（MSRT），Windows Defender，Security Essentials，Forefront Client Security，Forefront Endpoint Protection 2010，和Windows Live OneCare的Microsoft Malware Protection Engine 1.1.6603.0之前版本中存在漏洞。本地用户可以借助未明用户注册表项的特制值获取特权。
solution:Upgrade microsoft forefront_client_security to a higher version than *; Upgrade microsoft forefront_endpoint_protection_2010 to a higher version than -; Upgrade microsoft malicious_software_removal_tool to a higher version than *; Upgrade microsoft malware_protection_engine to a higher version than 1.1.6502.0,0.1.13.192,1.1.3520.0,and avoid the version (,1.1.6502.0],0.1.13.192,1.1.3520.0; Upgrade microsoft security_essentials to a higher version than *; Upgrade microsoft windows_defender to a higher version than *; Upgrade microsoft windows_live_onecare to a higher version than *