CVE-2011-1974 NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users....
HighCVSS 7.2
EPSS 7.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 48996 vdb-entry
- TA11-221A third-party-advisory us-government-resource
- MS11-062 vendor-advisory
- oval:org.mitre.oval:def:12912 signature vdb-entry
- 40627 exploit