CVE-2012-0149 Privilege escalation in n/a

What is CVE-2012-0149?

CVE-2012-0149 is a high-severity vulnerability in Microsoft Windows Server 2003, published on 14 Feb 2012. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."

Weakness: CWE-20

Which versions are affected by CVE-2012-0149?

It affects 1 product.

Products include Microsoft Windows Server 2003.

How do I fix CVE-2012-0149?

No fix has been published for CVE-2012-0149 yet. Limit exposure of the affected software until one is available.

Is CVE-2012-0149 being exploited?

There is no known exploitation of CVE-2012-0149 in the wild and no public exploit code.

Other vulnerabilities in Microsoft Windows Server 2003

• CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Exploited High 7.8
• CVE-2013-3863 Memory corruption in n/a Critical 9.3
• CVE-2013-3181 Memory corruption in n/a Critical 9.3
• CVE-2013-0077 Code injection in n/a Critical 9.3
• CVE-2012-0009 Path traversal in n/a Critical 9.3

All Microsoft Windows Server 2003 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5v8x-77c9-cr87.