CVE-2008-1138

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \\.\DLKPFSD_Device, aka the "ring0 link list zero" vulnerability.

CVSS v2.0

4.9 MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.87% chance of exploitation in the next 30 days, 56th percentile

Published

2008-03-04

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5142

References

• CVE Record
• NVD entry

Related

• CVE-2008-1137
• CVE-2008-1139
• CVE-2008-1136
• CVE-2008-1140
• CVE-2008-1134
• CVE-2008-1141