NVD

Id
3342  
Name
CVE-2008-3464  
Description
afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2011-03-07  
Seq
2008-3464  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21022 3342 CVE-2008-3464 http://blogs.technet.com/swi/archive/2008/10/14/ms08-066-how-to-correctly-validate-and-capture-user-mode-data.aspx  View
21023 3342 CVE-2008-3464 HPSBST02379  View
21024 3342 CVE-2008-3464 oval:org.mitre.oval:def:5825  View
21025 3342 CVE-2008-3464 MS08-066  View
21026 3342 CVE-2008-3464 6757  View
21027 3342 CVE-2008-3464 20081015 Exploit for MS08-066 - AFD.sys kernel memory overwrite.  View
21028 3342 CVE-2008-3464 31673  View
21029 3342 CVE-2008-3464 1021053  View
21030 3342 CVE-2008-3464 TA08-288A  View
21031 3342 CVE-2008-3464 ADV-2008-2817  View
21032 3342 CVE-2008-3464 win-afd-privilege-escalation(45578)  View
21033 3342 CVE-2008-3464 win-ms08kb956803-update(45582)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46556 JVNDB-2008-001866 Microsoft Windows の AFD コンポーネントにおける入力検証不備による権限昇格の脆弱性 Microsoft Windows の Ancillary Function Driver (AFD) コンポーネントに実装されている afd.sys には、ユーザモードから Kernel に送られた入力が正しく検証されないため、権限昇格の脆弱性が存在します。 CVE-2008-3464 33577 CVE-2008-3464 3342 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001866.html 2008-10-14 2008-11-18 View