CVE-2011-2005· microsoft / ancillary function driver (afd.sys)· CWE-264
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
Exploited in the wild. Listed by CISA on 2022-03-28; known to be used by ransomware.
31.8%likelihood of exploitation, next 30 days
98%of all CVEs are less likely
Nonecheck to confirm it
afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from