CVE:CVE-2006-0020
CNNVD:CNNVD-200601-101
Microsoft Internet Explorer是一款非常流行的WEB浏览器。
Microsoft Internet Explorer在处理畸形的WMF文件时存在漏洞，攻击者可能利用此漏洞导致用户机器拒绝服务或执行任意指令。Internet Explorer 5.01 SP4中所使用的Microsoft WMF解析应用程序存在内存破坏漏洞。攻击者可以创建带有畸形WMF头部大小的特制WMF文件，如果用户被诱使浏览了该文件的话就会触发整数溢出，导致拒绝服务或执行任意指令。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than r2,sp1,and avoid the version r2,sp1; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *:sp1,*:sp2,and avoid the version *:sp1,*:sp2