CVE:CVE-2006-0032
CNNVD:CNNVD-200609-167
Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。
Microsoft Windows 存在跨站脚本漏洞，索引服务没有正确地验证查询参数，可能允许跨站脚本执行。
如果用户受骗访问了恶意站点的话，攻击者可能可以代表用户运行客户端脚本。该脚本可能欺骗内容、泄露信息或执行用户可以在受影响的网站上执行的任何操作。成功攻击要求可以通过IIS访问索引服务。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,resource_kit,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4,resource_kit; Upgrade microsoft windows_2003_server to a higher version than datacenter_edition,datacenter_edition:sp1,datacenter_edition:sp1_beta_1,datacenter_edition_itanium,datacenter_edition_itanium:sp1,datacenter_edition_itanium:sp1_beta_1,enterprise_64-bit,enterprise_edition:sp1,enterprise_edition:sp1_beta_1,enterprise_edition_itanium,enterprise_edition_itanium:sp1,enterprise_edition_itanium:sp1_beta_1,r2,sp1,standard,standard:sp1,standard:sp1_beta_1,standard_64-bit,web,web:sp1,web:sp1_beta_1,and avoid the version datacenter_edition,datacenter_edition:sp1,datacenter_edition:sp1_beta_1,datacenter_edition_itanium,datacenter_edition_itanium:sp1,datacenter_edition_itanium:sp1_beta_1,enterprise_64-bit,enterprise_edition:sp1,enterprise_edition:sp1_beta_1,enterprise_edition_itanium,enterprise_edition_itanium:sp1,enterprise_edition_itanium:sp1_beta_1,r2,sp1,standard,standard:sp1,standard:sp1_beta_1,standard_64-bit,web,web:sp1,web:sp1_beta_1; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2