CVE-2008-4363 Memory corruption in n/a

High 7.2 Published 30 Sep 2008 Updated 7 Aug 2024

Local attackers can crash the system or execute arbitrary code via a malformed IOCTL request in the DESlock+ encryption driver.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2008-4363?

CVE-2008-4363 is a high-severity memory corruption vulnerability in n/a, published on 30 Sep 2008. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially execute arbitrary code via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was intended.

Weakness: CWE-20

Which versions are affected by CVE-2008-4363?

It affects 1 product.

Products include Deslock Deslock.

How do I fix CVE-2008-4363?

No fix has been published for CVE-2008-4363 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2008-4363 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-4363 exists.

Public exploit code: 2 Exploit-DB entries.

Sources

Also known as GHSA-6w96-g7qx-g62r.