Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/03/2008 Updated: 29/09/2017

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

DESlock+ 3.2.6 and previous versions, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
deslock deslock

/* deslock-list-zero-v2c * * Copyright (c) 2008 by <mu-b@digit-labsorg> * * DESlock+ <= 326 local kernel ring0 link list zero SYSTEM exploit * by mu-b - Fri 28 Dec 2007 * * - Tested on: DLMFENCsys 10026, DLMFDISKsys 12027 * - Microsoft Windows 2003 SP2 * - Microsoft Windows XP SP2 * * Compil ...

CWE-264 http://secunia.com/advisories/29005 http://www.vupen.com/english/advisories/2008/0597 https://www.exploit-db.com/exploits/5143 https://nvd.nist.gov https://www.exploit-db.com/exploits/5143/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-1139

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect