Test ID:	1.3.6.1.4.1.25623.1.0.902442
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Ancillary Function Driver Privilege Elevation Vulnerability
Summary:	This host is missing an important security update according to; Microsoft Bulletin MS11-046.
Description:	Summary: This host is missing an important security update according to Microsoft Bulletin MS11-046. Vulnerability Insight: The flaw is caused by an error in Ancillary Function Driver (AFD) which does not properly validates input before passing the input from user mode to the Windows kernel. Vulnerability Impact: Successful exploitation could allow elevation of privilege if an attacker logs on to a user's system and runs a specially crafted application. Affected Software/OS: - Microsoft Windows 7 Service Pack 1 and prior - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2K3 Service Pack 2 and prior - Microsoft Windows Vista Service Pack 2 and prior - Microsoft Windows Server 2008 Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1249 https://www.exploit-db.com/exploits/40564/ Microsoft Security Bulletin: MS11-046 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-046 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12731
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.