CVE:CVE-2010-0236
CNNVD:CNNVD-201004-260
Windows 是Microsoft公司开发的广为流行的视窗操作系统。
Microsoft Windows 内核注册键值符号链接存在本地权限提升漏洞。Microsoft Windows 2000 SP4、XP SP2 & SP3、Server 2003 SP2、和Vista Gold的内核无法为符号链接注册表键相关的目标键正确分配内存，本地用户可以通过特制的应用获得权限，即‘Windows内核内存分配漏洞’。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,-:sp2,and avoid the version *:sp2,*:sp3,-:sp2; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_vista to a higher version than *