CVE

Id
49917  
CVE No.
CVE-2011-2005  
Status
Candidate  
Description
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."  
Phase
Assigned (20110509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
541606 49917 CVE-2011-2005 MS:MS11-080  View
541607 49917 CVE-2011-2005 URL:http://technet.microsoft.com/en-us/security/bulletin/MS11-080  View
541608 49917 CVE-2011-2005 OVAL:oval:org.mitre.oval:def:13114  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33111 JVNDB-2011-003351 複数の Microsoft 製品の簡体字中国語版 Microsoft Office IME における権限昇格の脆弱性 複数の Microsoft 製品の簡体字中国語版 Microsoft Office Input Method Editor (IME) は、構成オプションへのアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2011-2010 49917 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003351.html  View