CVE-2013-3887

Description

The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows local users to obtain sensitive information from kernel memory by leveraging improper copy operations, aka Ancillary Function Driver Information Disclosure Vulnerability.

Risk Information

Base Score

5.5

MODERATE

Vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.468

Associated Vulnerability

Vulnerability	OS Platform
Security Update for Windows XP x64 Edition (KB2875783)	Windows
Security Update for Windows Server 2003 x64 Edition (KB2875783)	Windows
Security Update for Windows Vista for x64-based Systems (KB2875783)	Windows
Security Update for Windows Server 2008 x64 Edition (KB2875783)	Windows
Security Update for Windows 7 for x64-based Systems (KB2875783)	Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB2875783)	Windows
Security Update for Windows 8 for x64-based Systems (KB2875783)	Windows
Security Update for Windows Server 2012 (KB2875783)	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-14755	Security Update for Windows XP x64 Edition (KB2875783)
PATCH-14756	Security Update for Windows Server 2003 x64 Edition (KB2875783)
PATCH-14757	Security Update for Windows Vista for x64-based Systems (KB2875783)
PATCH-14758	Security Update for Windows Server 2008 x64 Edition (KB2875783)
PATCH-14759	Security Update for Windows 7 for x64-based Systems (KB2875783)
PATCH-14760	Security Update for Windows Server 2008 R2 x64 Edition (KB2875783)
PATCH-14761	Security Update for Windows 8 for x64-based Systems (KB2875783)
PATCH-14762	Security Update for Windows Server 2012 (KB2875783)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234