Test ID:	1.3.6.1.4.1.25623.1.0.902482
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Ancillary Function Driver Privilege Elevation Vulnerability (2592799)
Summary:	This host is missing an important security update according to; Microsoft Bulletin MS11-080.
Description:	Summary: This host is missing an important security update according to Microsoft Bulletin MS11-080. Vulnerability Insight: The flaw is caused by an error in Ancillary Function Driver (AFD) which does not properly validates input before passing the input from user mode to the Windows kernel. Vulnerability Impact: Successful exploitation could allow elevation of privilege if an attacker logs on to a user's system and runs a specially crafted application. Affected Software/OS: - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2K3 Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2005 Microsoft Security Bulletin: MS11-080 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-080 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13114
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.