CVE-2011-2005
Microsoft Windows Xp
Raw vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2011-2005 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Xp. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 2% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
The vulnerability CVE-2011-2005 resides in afd.sys, the Ancillary Function Driver component of Microsoft Windows XP SP2 and SP3 as well as Windows Server 2003 SP2. It arises from insufficient validation of user-mode input passed to kernel mode, enabling an elevation of privilege condition rated at CVSS 7.8.
Local users can exploit the flaw by executing a specially crafted application, resulting in the ability to obtain higher privileges on the target system.
Microsoft security bulletin MS11-080 supplies patches and mitigation steps for the affected platforms, while associated OVAL definitions support detection. The issue appears in the CISA Known Exploited Vulnerabilities Catalog, confirming observed real-world exploitation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2011-1999
Vulnerability Data
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary…
more
Function Driver Elevation of Privilege Vulnerability."
- CWE(s)
- KEV Date Added
- 28 March 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.