http://www.microsoft.com/technet/security/Bulletin/MS07-017.mspx

Microsoft Security Bulletin MS07-017        Vulnerabilities in GDI Could Allow Remote Code Execution (925902)        Published: April 3, 2007
        Version: 1.0
<script language="javascript">sID='l1-ELB'</script>Summary                        Who Should Read this Document: Customers who use Microsoft Windows
                Impact of Vulnerability: Remote Code Execution
                Maximum Severity Rating: Critical
                Recommendation: Customers should apply the update immediately
                Security Update Replacement: This bulletin replaces a prior security update. See the Frequently Asked Questions (FAQ) section of this bulletin for details.
                Caveats: Microsoft Knowledge Base Article 925902 documents the currently known issues that customers may experience when they install this security update. The article also documents recommended solutions for these issues. For more information, see Microsoft Knowledge Base Article 925902
                Tested Software and Security Update Download Locations:
                Affected Software:
                                                                                                                                                                                                                                               

•	Microsoft Windows 2000 Service Pack 4 — Download the update
•	Microsoft Windows XP Service Pack 2 — Download the update
•	Microsoft Windows XP Professional x64 Edition and Microsoft Windows XP Professional x64 Edition Service Pack 2 — Download the update
•	Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service Pack 1, and Microsoft Windows Server 2003 Service Pack 2 — Download the update
•	Microsoft Windows Server 2003 for Itanium-based Systems, Microsoft Windows Server 2003 with SP1 for Itanium-based Systems, and Microsoft Windows Server 2003 with SP2 for Itanium-based Systems — Download the update
•	Microsoft Windows Server 2003 x64 Edition and Microsoft Windows Server 2003 x64 Edition Service Pack 2 — Download the update
•	Windows Vista — Download the update
•	Windows Vista x64 Edition — Download the update

                The software in this list has been tested to determine whether the versions are affected. Other versions are either past their support life cycle or are not affected. To determine the support life cycle for your product and version, visit the Microsoft Support Lifecycle Web site.

引用:

原帖由 AzureZH 于 2007-4-4 12:15 发表
要不要WGA？

MS不要，更新时没有提示。