CVE-2011-1974

NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

6.98% chance of exploitation in the next 30 days, 94th percentile

Published

2011-08-10

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40627

Exploit collections (1)

• helloexp/0day/blob/master/97-Windows%E6%8F%90%E6%9D%83/MS11-062/CVE-2011-1974.c

References

• CVE Record
• NVD entry

Related

• CVE-2011-1965
• CVE-2011-1976
• CVE-2011-1956
• CVE-2011-1984
• CVE-2011-1944
• CVE-2011-1985