Microsoft Windows Ancillary Function Driver Multiple Vulnerabilities

Last Update Date: 15 Feb 2012 12:01 Release Date: 15 Feb 2012 4460 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

AfdPoll Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists where the Ancillary Function Driver (afd.sys) improperly validates input passed from user mode to the Windows kernel. The vulnerability could allow an attacker to run code with elevated privileges. A local attacker who successfully exploited this vulnerability could execute arbitrary code and take complete control of an affected system. The attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
Ancillary Function Driver Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists where the Ancillary Function Driver (afd.sys) improperly validates input passed from user mode to the Windows kernel. The vulnerability could allow an attacker to run code with elevated privileges. A local attacker who successfully exploited this vulnerability could execute arbitrary code and take complete control of an affected system. The attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

System / Technologies affected

Before installation of the software, please visit the software manufacturer web-site for more details.