This host is missing an important security update according to Microsoft Bulletin MS12-009.

Successful exploitation could allow elevation of privilege if an attacker logs on to a user's system and runs a specially crafted application. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-009

The flaws are caused due an error in Ancillary Function Driver (AFD) which does not properly validate input passed from user mode to the Windows kernel.

Microsoft Windows 2K3 Service Pack 2 and prior.

• http://secunia.com/advisories/47911/
• http://support.microsoft.com/kb/2645640
• http://technet.microsoft.com/en-us/security/bulletin/ms12-009

---

Updated on 2015-03-25