CVE-2008-3464
Description
afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka AFD Kernel Overwrite Vulnerability.
Risk Information
Base Score
7.3
MODERATE
Vector
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.347
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| ms08-066: vulnerability in the microsoft ancillary function driver could allow elevation of privilege for Windows XP (KB956803) x86 based systems | Windows |
| ms08-066: vulnerability in the microsoft ancillary function driver could allow elevation of privilege for Windows XP (KB956803) x86 based systems for SP3 | Windows |
| ms08-066: vulnerability in the microsoft ancillary function driver could allow elevation of privilege for Windows Server 2003 (KB956803) x86 based systems | Windows |
| ms08-066: vulnerability in the microsoft ancillary function driver could allow elevation of privilege for Windows Server 2003 (KB956803) x86 based systems for SP3 | Windows |
| ms08-066: vulnerability in the microsoft ancillary function driver could allow elevation of privilege for Windows XP x64 Edition (KB956803) | Windows |
| ms08-066: vulnerability in the microsoft ancillary function driver could allow elevation of privilege for Windows Server 2003 x64 Edition (KB956803) | Windows |
| ms08-066: vulnerability in the microsoft ancillary function driver could allow elevation of privilege for Windows Server 2003 x64 Edition (KB956803) for SP2 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-6564 | Security Update for Windows XP x64 Edition (KB956803) |
| PATCH-6566 | Security Update for Windows Server 2003 x64 Edition (KB956803) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234