Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
BID:31673
Info
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
| Bugtraq ID: | 31673 |
| Class: | Unknown |
| CVE: |
CVE-2008-3464 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 14 2008 12:00AM |
| Updated: | Oct 17 2008 09:57PM |
| Credit: | Fabien Le Mentec of SkyRecon |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP3 Microsoft Windows XP Professional SP2 Microsoft Windows XP Media Center Edition SP3 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Home SP3 Microsoft Windows XP Home SP2 Microsoft Windows Server 2003 x64 SP2 Microsoft Windows Server 2003 Web Edition SP2 Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP2 Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 Itanium SP1 Microsoft Windows Server 2003 Enterprise x64 Edition SP2 Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Datacenter x64 Edition SP2 Microsoft Windows Server 2003 Datacenter x64 Edition |
| Not Vulnerable: | |
Discussion
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
Microsoft Windows is prone to a local privilege-escalation vulnerability in the Ancillary Function Driver ('afd.sys').
A successful exploit of this vulnerability will let a local attacker completely compromise an affected computer.
Microsoft Windows is prone to a local privilege-escalation vulnerability in the Ancillary Function Driver ('afd.sys').
A successful exploit of this vulnerability will let a local attacker completely compromise an affected computer.
Exploit / POC
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit code is available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit code is available:
Solution / Fix
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
Solution:
Microsoft has released a security bulletin and fixes to address this vulnerability.
Microsoft Windows Server 2003 Datacenter x64 Edition
Microsoft Windows XP Tablet PC Edition SP2
Microsoft Windows Server 2003 Itanium SP2
Microsoft Windows XP Media Center Edition SP3
Microsoft Windows XP Media Center Edition SP2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003 Itanium SP1
Microsoft Windows Server 2003 Web Edition SP1
Microsoft Windows Server 2003 Web Edition SP2
Microsoft Windows XP Home SP3
Microsoft Windows Server 2003 Standard Edition SP1
Microsoft Windows XP Professional x64 Edition SP2
Microsoft Windows XP Professional SP3
Microsoft Windows XP Professional SP2
Microsoft Windows Server 2003 x64 SP2
Microsoft Windows Server 2003 Standard x64 Edition
Microsoft Windows Server 2003 Datacenter x64 Edition SP2
Microsoft Windows Server 2003 Enterprise x64 Edition SP2
Microsoft Windows Server 2003 Enterprise x64 Edition
Microsoft Windows XP Tablet PC Edition SP3
Microsoft Windows Server 2003 Standard Edition SP2
Microsoft Windows XP Home SP2
Solution:
Microsoft has released a security bulletin and fixes to address this vulnerability.
Microsoft Windows Server 2003 Datacenter x64 Edition
-
Microsoft Security Update for Windows Server 2003 x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ab4d94d3-458c -4946-ab7f-03a279629d25
Microsoft Windows XP Tablet PC Edition SP2
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
Microsoft Windows Server 2003 Itanium SP2
-
Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=63234f85-6e5d -4ef6-b7cf-d1d2c78a5517
Microsoft Windows XP Media Center Edition SP3
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
Microsoft Windows XP Media Center Edition SP2
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
Microsoft Windows XP Professional x64 Edition
-
Microsoft Security Update for Windows XP x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=5b607efc-c6fb -4079-8478-e4f3262386d3
Microsoft Windows Server 2003 Itanium SP1
-
Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=63234f85-6e5d -4ef6-b7cf-d1d2c78a5517
Microsoft Windows Server 2003 Web Edition SP1
-
Microsoft Security Update for Windows Server 2003 (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ee88ff2d-1b12 -4f4c-a081-9f27a6fba074
Microsoft Windows Server 2003 Web Edition SP2
-
Microsoft Security Update for Windows Server 2003 (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ee88ff2d-1b12 -4f4c-a081-9f27a6fba074
Microsoft Windows XP Home SP3
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
Microsoft Windows Server 2003 Standard Edition SP1
-
Microsoft Security Update for Windows Server 2003 (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ee88ff2d-1b12 -4f4c-a081-9f27a6fba074
Microsoft Windows XP Professional x64 Edition SP2
-
Microsoft Security Update for Windows XP x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=5b607efc-c6fb -4079-8478-e4f3262386d3
Microsoft Windows XP Professional SP3
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
Microsoft Windows XP Professional SP2
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
Microsoft Windows Server 2003 x64 SP2
-
Microsoft Security Update for Windows Server 2003 x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ab4d94d3-458c -4946-ab7f-03a279629d25
Microsoft Windows Server 2003 Standard x64 Edition
-
Microsoft Security Update for Windows Server 2003 x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ab4d94d3-458c -4946-ab7f-03a279629d25
Microsoft Windows Server 2003 Datacenter x64 Edition SP2
-
Microsoft Security Update for Windows Server 2003 x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ab4d94d3-458c -4946-ab7f-03a279629d25
Microsoft Windows Server 2003 Enterprise x64 Edition SP2
-
Microsoft Security Update for Windows Server 2003 x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ab4d94d3-458c -4946-ab7f-03a279629d25
Microsoft Windows Server 2003 Enterprise x64 Edition
-
Microsoft Security Update for Windows Server 2003 x64 Edition (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ab4d94d3-458c -4946-ab7f-03a279629d25
Microsoft Windows XP Tablet PC Edition SP3
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
Microsoft Windows Server 2003 Standard Edition SP2
-
Microsoft Security Update for Windows Server 2003 (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=ee88ff2d-1b12 -4f4c-a081-9f27a6fba074
Microsoft Windows XP Home SP2
-
Microsoft Security Update for Windows XP (KB956803)
http://www.microsoft.com/downloads/details.aspx?familyid=b16d9dac-c430 -4dd8-a1e5-9a614801f1d9
References
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
References:
References:
- MS08-066 : Catching and fixing a ProbeForRead / ProbeForWrite bypass (Security Vulnerability Research & Defense)
- Exploit for MS08-066 - AFD.sys kernel memory overwrite. (Reversemode
- Microsoft Security Bulletin MS08-066 (Microsoft)