Vulnerability in Microsoft Windows 2003 Server
CVE-2011-1249
The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.085 (94.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 94.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.085 · newest: 0.085 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-046 (vendor-advisory)
- www.exploit-db.com/exploits/40564/ (exploit)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:12731 (signature, vdb-entry)
Frequently asked questions
- What is CVE-2011-1249?
- CVE-2011-1249 is a vulnerability in Microsoft Windows 2003 Server, classified under CWE-264. Published 2011-06-16.
- Is CVE-2011-1249 known to be exploited?
- 25 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.