CVE-2008-3464 in Windows
要約 (英語)
afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability."
If you want to get best quality of vulnerability data, you may have to visit VulDB.
予約する
2008年08月04日
公開
2008年10月14日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 3853 | Microsoft Windows Ancillary Function 特権昇格 | 264 | 概念実証 | 公式な修正 | CVE-2008-3464 |