CVE-2008-4362

DESlock+ 3.2.7 - Denial of Service via Crafted IOCTL Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4362. PoCs published by NT Internals.

AI-analyzed exploit summary This exploit triggers a Denial of Service (DoS) condition in the DESlock+ Virtual Token Driver by sending a malformed IOCTL request to the vulnerable driver, resulting in a Blue Screen of Death (BSoD).

Description

The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL request to \Device\DLPTokenWalter0.

Exploits (1)

exploitdb WORKING POC VERIFIED
by NT Internals · cdoswindows
https://www.exploit-db.com/exploits/6515

This exploit triggers a Denial of Service (DoS) condition in the DESlock+ Virtual Token Driver by sending a malformed IOCTL request to the vulnerable driver, resulting in a Blue Screen of Death (BSoD).

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: DESlock+ Virtual Token Driver 1.0.2.43 (vdlptokn.sys)
No auth needed
Prerequisites: Access to the target system to execute the exploit
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31921
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2638
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4341
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/6515

Scores

EPSS 0.0082
EPSS Percentile 52.3%

Details

CWE
CWE-399
Status published
Products (1)
deslock/deslock 3.2.7
Published Sep 30, 2008
Tracked Since Feb 18, 2026