medium4.9Public exploit code
CVE-2008-1138
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DESlock+ < 3.2.6 - 'DLMFENC.sys' Local Kernel Ring0 link list zero (PoC)2008-02-18 · dos · windows · Verified
Impact
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \\.\DLKPFSD_Device, aka the "ring0 link list zero" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deslock | Deslock | through 3.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29005
- http://www.vupen.com/english/advisories/2008/0597
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41204
- https://www.exploit-db.com/exploits/5142
- http://secunia.com/advisories/29005
- http://www.vupen.com/english/advisories/2008/0597
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41204
- https://www.exploit-db.com/exploits/5142