Tigger.A Jumps at Microsoft's Privilege Elevation vulnerability

Tigger.A is still around and harassing those that didn't make use of Microsoft's MS08-066 patch to fix the vulnerability in its Ancillary Function Driver (AFD) that, when manipulated can allow for the elevation of privileges. What this basically means is that hackers are able to manipulate the AFD (afd.sys) in order to administer and obtain unauthorized access to a targeted system.

The elevation of privilege vulnerability is a result of Windows not being able to efficiently authenticate input flowing from user mode to kernel mode. Because of this a hacker can run a code with elevated privileges and take complete control of a victims system. The hacker will then be able to install malicious programs, view data and create new accounts, all with full user rights.