CVE:CVE-2017-0190
CNNVD:CNNVD-201705-503
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。Graphics Device Interface（GDI，图形设备接口）是其中的一个应用程序接口，它的主要任务是负责系统与绘图程序之间的信息交换，以及处理所有Windows程序的图形输出。 
Microsoft Windows中的GDI组件存在信息泄露漏洞。攻击者可借助特制的应用程序利用该漏洞检索目标系统的信息。以下产品受到影响：Microsoft Windows Server 2008 SP2和R2 SP1；Windows 7 SP1；Windows 8.1；Windows Server 2012 Gold和R2；Windows RT 8.1；Windows 10，10版本1511和1607；Windows Server 2016。
solution:Upgrade microsoft windows_10 to a higher version than -,1511,1607,and avoid the version 1511,1607; Upgrade microsoft windows_7 to a higher version than *:sp1,and avoid the version *:sp1; Upgrade microsoft windows_8.1 to a higher version than *; Upgrade microsoft windows_rt_8.1 to a higher version than *; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,r2:sp1,and avoid the version *:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than *