CVE-2008-3464 in Windows

सारांश

द्वारा VulDB • 03/07/2026

afd.sys in Ancillary Function Driver (AFD) component of Microsoft Windows XP SP2 aur SP3 ke saath, along with Windows Server 2003 SP1 aur SP2 mein user mode se kernel tak bheje gaye input ko sahi tarah validate nahi karta hai. Isse local users crafted application ka istemal karke privileges gain kar sakte hain, jaise ki crafted pointers aur lengths ke through intended ProbeForRead aur ProbeForWrite restrictions bypass ho jaate hain. Ise "AFD Kernel Overwrite Vulnerability" bhi kaha gaya hai.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 04/08/2008
• प्रकटीकरण: 14/10/2008
• संयम: स्वीकृत
• प्रविष्टि: VDB-3853
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• शोषण: डाउनलोड
• CVSS: 7.2 (NVD)
• EPSS: 0.04026
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Government, Hostingprovider, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-3464
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3464
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-3464/