Core Security
info@coresecurity.com  | +1.617.399.6980 | Contact Us   Core Blog Core Blog Twitter LinkedIn youtube
SHARE

CORE IMPACT v12 - Exploits Update (Mon Oct 31 2011)

Microsoft Windows AFD AfdConnect Privilege Escalation Exploit (MS11-046) Update

Exploits/Local  [Windows]




Mon Oct 31 2011
The Ancillary Function Driver (AFD.sys) present in Microsoft Windows is vulnerable to an arbitrary pointer overwrite. This module allows a local unprivileged user to execute arbitrary code with SYSTEM privileges by sending a specially crafted IOCTL to the vulnerable driver. This update adds support for Windows 2003.

Exploits Vulnerabiltiy: CVE-2011-1249



< Back to Product Updates