EUVD-2008-1148

Malware in sbrugna...

EUVD-2008-4344

Malware in sbrugna...

DESlock+ <= 3.2.7 - Local Kernel Overflow PoC

No description provided by source. / deslock-overflow.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel overflow POC by mu-b - Sat 23 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 http://www.cctmark.gov.uk/CCTMAwards/DataEncryptionSystemsLtd/tabid/103/Default.aspx - I wonder wh...

CVE-2008-4363: Improper Input Validation

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash or potentially execute arbitrary code via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was...

Memory corruption

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...

Design/Logic Flaw

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...

CVE-2008-1138

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...

CVE-2008-1141

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...

Design/Logic Flaw

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...

CVE-2008-1141

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...

CVE-2008-1139

DESlock+ 3.2.6 and earlier are affected when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present. A DLMFENC_IOCTL request to the device .\DLKPFSD_Device can overwrite a pointer, enabling local privilege escalation to SYSTEM (the “ring0 link list zero SYSTEM” issue). Affected components are...

CVE-2008-1141: Undefined Security Weakness

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...

CVE-2008-1138: Improper Restriction of Operations within the Bounds of a Memory Buffer

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...

CVE-2008-1139: Undefined Security Weakness

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...