7.8

CVE-2018-5410

Exploit

Dokan file system driver contains a stack-based buffer overflow

Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dokan-dev ≫ Dokany Version >= 1.0.0.5000 < 1.2.0.1000
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.725
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.securityfocus.com/bid/106274
Third Party Advisory
VDB Entry
https://cwe.mitre.org/data/definitions/121.html
Third Party Advisory
https://github.com/dokan-dev/dokany/releases/tag/v1.2.1.1000
Patch
Third Party Advisory
https://kb.cert.org/vuls/id/741315/
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/46155/
Third Party Advisory
Exploit
VDB Entry