VULNERABILITY INTELLIGENCE

CVE-2017-12840

CVSS score7.8 HIGH

EPSS probability0.33%

CISA KEVNot currently listed

Published2017-08-28

Last modified2026-06-17

Description

A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally exploitable heap based buffer overflow in the handling of an IOCTL message of type 0x0FA4204. The vulnerability is present due to the kernel driver failing to allocate sufficient m... .