edb-40564-mingw-fix

ms11-046-mingw CVE-2011-1249 / MS11-046 — 针对 Windows x86 的 AFD.sys 权限提升漏洞。 原始利用代码由 Tomislav Paskalev 提供（EDB-40564）。此分支修复了 MinGW 交叉编译错误，并通过 argv1 添加了自定义命令执行功能。 与原始版本的变更 | 变更| 原因 ---|---|--- 1| FARPROC ZwQuerySystemInformation → 带类型的函数指针（pZwQuerySystemInformation）| MinGW 严格类型检查拒绝调用带参数的零参数...

OHTS

OHTS Microsoft Windows - Informe de exploit de escalada de privilegios del kernel local 'afd.sys' CVE-2011-1249...

CVE-2011-1249

creationtimestamp| type| source ---|---|--- 2016-10-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40564 2026-05-06 15:00:06+00:00| seen| Telegram/ZNI-uYyJrm1t-Pzb3CHRhrHrIF7V6AFj0czDxk1WB0iTdAU 2026-08-27 12:00:13+00:00| seen|...

Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)

/ Exploit Title: Windows x86 all versions AFD privilege escalation MS11-046 Date: 2016-10-16 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP Pro SP2 x64 Windows Server 2003 SP2 x86 Windows Server 2003 SP2 x64 Windows Server 2003 SP2 Itanium-based Systems Windo...

MS11-046 Microsoft Windows (x86) - 'afd.sys' Privilege Escalation (CVE-2011-1249)

No description provided by source. / MS11-046 Was a Zero day found in the wild , reported to MS by Steven Adair from the Shadowserver Foundation and Chris S . Ronnie Johndas wrote the writeup dissecting a malware with this exploit . I Rahul Sasifb1h2s just made the POC exploit available...

CVE-2011-1249

The Ancillary Function Driver (AFD) in afd.sys on multiple Microsoft Windows versions (including XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008, and Windows 7) fails to properly validate user-mode input. This vulnerability allows local users to perform elevation of privilege by executing...

MS11-046: Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2503665)

The remote Windows host contains a version of the Ancillary Function Driver afd.sys that does not properly validate input before passing it from user mode to the kernel. An attacker with local access to the affected system could exploit this issue to execute arbitrary code in kernel mode and take...