CVE-2018-5410 Dokan file system driver contains a stack-based buffer overflow

2019-01-0714:00:00

CWE-121

certcc

www.cve.org

0.001 Low

EPSS

Percentile

51.3%

JSON

Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.

CNA Affected

[
  {
    "product": "Open Source File System",
    "vendor": "Dokan",
    "versions": [
      {
        "lessThan": "1.0.0.5000*",
        "status": "affected",
        "version": "1.0.0.5000",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.2.0.1000",
        "status": "affected",
        "version": "1.2.0.1000",
        "versionType": "custom"
      }
    ]
  }
]