$ cve CVE-2008-3464 JSON

CVE-2008-3464 EXPLOIT

7.2

HIGH · CVSS 2.0 · EPSS 4% (pctl 90)

Patch early

A public exploit exists.

Description

afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability."

Scoring

CVSS	7.2 (HIGH, v2.0)
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS	4.03% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-264
On CISA KEV	no
Public exploit	yes
Published	2008-10-15
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	windows 2003 server
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows XP/2003 - 'afd.sys' Local Privilege Escalation (K-plugin) (MS08-066)	2008-10-15

References

→ the Explorer · watch your stack · NVD