CVE-2008-1139

DESlock+ <3.2.6 - Privilege Escalation

Title source: llm

Description

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability.

Exploits (1)

exploitdb WORKING POC VERIFIED
by mu-b · clocalwindows
https://www.exploit-db.com/exploits/5143

Scores

EPSS 0.0030
EPSS Percentile 52.9%

Details

CWE
CWE-264
Status published
Products (1)
deslock/deslock < 3.2.6
Published Mar 04, 2008
Tracked Since Feb 18, 2026