Back to Database
Status published
High
CVE-2008-4363
DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause...
Vulnerability Description
DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially execute arbitrary code via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was intended.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4363
Credits & Attribution
No credits recorded in the NVD database.
References
More from deslock
View All →CVE-2017-12840
A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client...
High
7.8
CVE-2009-4832
The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local...
High
7.2
CVE-2008-4362
The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows...
Medium
4.9
CVE-2008-1141
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier...
Medium
4.9
CVE-2008-1140
DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users...
High
7.2
Affected Vendor
deslock
View all reports →Affected Software
deslock
Vulnerable Versions:
3.2.7
Timeline
Official Publish:
September 30th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.