CVE-2008-1141

This exploit demonstrates a local kernel buffer overflow in DESlock+ <= 3.2.7 by sending a maliciously crafted IOCTL request to the DLKPFSD_Device driver. The PoC triggers a crash by overflowing a buffer with a large filename, but does not include a payload for execution.

This exploit demonstrates a kernel memory leak in DESlock+ <= 3.2.6 by repeatedly allocating linked list structures without freeing them, using a unique ProcessID for each allocation. It interacts with the DLKPFSD_Device driver via DeviceIoControl to trigger the vulnerability.