CVE-2011-1974

NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

6.98% chance of exploitation in the next 30 days, 94th percentile

Published

2011-08-10

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40627

Exploit collections (1)

• CVE-2011-1974.chelloexp/0day

Security advisories

• http://www.securityfocus.com/bid/48996
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-062

References

• CVE Record
• NVD entry