CVE-2008-1141
DESlock+ < 3.2.6 - Denial of Service via DLMFENC_IOCTL Requests
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-1141. PoCs published by mu-b.
AI-analyzed exploit summary This exploit demonstrates a local kernel buffer overflow in DESlock+ <= 3.2.7 by sending a maliciously crafted IOCTL request to the DLKPFSD_Device driver. The PoC triggers a crash by overflowing a buffer with a large filename, but does not include a payload for execution.
Description
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kernel memory consumption) via a series of DLMFENC_IOCTL requests to \\.\DLKPFSD_Device that allocate "link list structures."
Exploits (2)
This exploit demonstrates a local kernel buffer overflow in DESlock+ <= 3.2.7 by sending a maliciously crafted IOCTL request to the DLKPFSD_Device driver. The PoC triggers a crash by overflowing a buffer with a large filename, but does not include a payload for execution.
This exploit demonstrates a kernel memory leak in DESlock+ <= 3.2.6 by repeatedly allocating linked list structures without freeing them, using a unique ProcessID for each allocation. It interacts with the DLKPFSD_Device driver via DeviceIoControl to trigger the vulnerability.