CVE-2011-2005

Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

Windows Server 2003

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."

12. Okt 2011

Ausgewertete Quellen

• Microsoft
  https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-080
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-2005
• CISA
  Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
• NVD
  CVE-2011-2005