CVE-2012-0149

CVE-2012-0149 describes an elevation of privilege vulnerability in the Ancillary Function Driver (afd.sys) within Microsoft Windows Server 2003 SP2. This flaw stems from insufficient validation of user-mode input passed to kernel mode, allowing a local attacker to gain elevated privileges through a specially crafted application. With a CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), this vulnerability is considered highly severe, requiring local access but having low attack complexity and leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.