Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2018-5410

Good to know:

icon

Date: January 7, 2019

Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.

Language: C

Severity Score

Related Resources (7)

https://kb.cert.org/vuls/id/741315/
https://www.exploit-db.com/exploits/46155/
https://cwe.mitre.org/data/definitions/121.html
https://github.com/dokan-dev/dokany/releases/tag/v1.2.1.1000
https://nvd.nist.gov/vuln/detail/CVE-2018-5410
http://www.securityfocus.com/bid/106274
https://www.mend.io/vulnerability-database/CVE-2018-5410

Severity Score

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

Out-of-bounds Write

CWE-787

Stack-based Buffer Overflow

CWE-121

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us