CVE-2011-2005—Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

漏洞名称

Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

描述

afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2011-2005

相关 CWE

• CWE-264