CVE-2011-2005
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 12, 2011
Updated: Dec 19, 2024
Summary
CVE-2011-2005 is a vulnerability affecting the Ancillary Function Driver (afd.sys) in Microsoft Windows XP SP2, SP3, and Server 2003 SP2. This issue allows local users to elevate their privileges by providing incorrect user-mode input to the kernel mode without proper validation, resulting in a privilege escalation. A maliciously crafted application can exploit this flaw to gain higher access rights than intended.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2003
- Microsoft Windows XP
Affected Vendors
- Microsoft