Oval Definition:oval:org.mitre.oval:def:24592
Revision Date:2014-08-18Version:24
Title:Ancillary Function Driver Elevation of Privilege Vulnerability - CVE-2014-1767 (MS14-040)
Description:Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-1767
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):
Definition Synopsis
  • Vulnerable Microsoft Windows Server 2003 x86,x64/ia64 SP2
  • Windows Server 2003 x86,x64/ia64 SP2
  • Microsoft Windows Server 2003 SP2 (x64) is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • AND Check if the version of Afd.sys is less than 5.2.3790.5358
  • OR Vulnerable Microsoft Windows Vista x86,x64 SP2, Server 2008 x86,x64/ia64 SP2
  • Windows Vista x86,x64 SP2, Server 2008 x86,x64/ia64
  • Microsoft Windows Vista x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed
  • OR Microsoft Windows Vista (32-bit) Service Pack 2 is installed
  • OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
  • AND GDR or LDR Service branch
  • Check if the version of Afd.sys is less than 6.0.6002.19115
  • OR LDR
  • Check if the version of afd.sys is greater than or equal to 6.0.6002.23000
  • AND Check if the version of Afd.sys is less than 6.0.6002.23414
  • OR Vulnerable Microsoft Windows 7 x64 SP1, Server 2008 R2 x64/ia64 SP1
  • Microsoft Windows 7 x86,x64 SP1, Server 2008 R2 x64/ia64 SP1
  • Microsoft Windows 7 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed
  • OR Microsoft Windows 7 (32-bit) Service Pack 1 is installed
  • AND GDR or LDR Service branch
  • Check if the version of Afd.sys is less than 6.1.7601.18489
  • OR LDR
  • The version of afd.sys is greater than or equal to 6.1.7601.21000
  • AND Check if the version of Afd.sys is less than 6.1.7601.22705
  • OR Win 8 / 2k12 and vulnerable file version
  • Win 8 / 2k12
  • Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows 8 (x86) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • AND Check for vulnerable version
  • Check if the version of Afd.sys is less than 6.2.9200.17014
  • OR Check for LDR range
  • Check if the version of Afd.sys is less than 6.2.9200.21133
  • AND Check if the version of afd.sys is greater than or equal to 6.2.9200.20000
  • OR 8.1/2012 R2 and vulnerable version
  • 8.1/ 2012 R2
  • Microsoft Windows 8.1 (x86) is installed
  • OR Microsoft Windows 8.1 (x64) is installed
  • OR Microsoft Windows Server 2012 R2 is installed
  • AND Check for vulnerable version
  • Check if the version of Afd.sys is less than 6.3.9600.16668
  • OR Check for LDR range
  • Check if the version of Afd.sys is less than 6.3.9600.17194
  • AND Check if the version of Afd.sys is greater than or equal to 6.3.9600.17088
  • BACK