Lucene search

K
cve[email protected]CVE-2008-4362
HistorySep 30, 2008 - 11:24 p.m.

CVE-2008-4362

2008-09-3023:24:53
CWE-399
web.nvd.nist.gov
24
cve-2008-4362
virtual token
vdlptokn.sys
deslock+
dos
ioctl
nvd

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL request to \Device\DLPTokenWalter0.

Affected configurations

NVD
Node
deslockdeslockMatch3.2.7
CPENameOperatorVersion
deslock:deslockdeslockeq3.2.7

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

Related for CVE-2008-4362