DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier... · CVE-2008-1140 · GitHub Advisory Database · GitHub

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier...

High severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Jan 31, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL request to \.\DLKFDisk_Control that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability.

References

Published by the National Vulnerability Database

Mar 4, 2008

Published to the GitHub Advisory Database May 1, 2022

Last updated Jan 31, 2023