DESLock+ IOCTL Request Local Code Execution and Denial of Service Vulnerabilities

DESlock+ is prone to multiple vulnerabilities that allow arbitrary code to run with SYSTEM-level privileges or cause denial-of-service conditions.

Local attackers can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise the computer or cause a denial of service.

DESlock+ 3.2.6 and prior versions are vulnerable.


 

Privacy Statement
Copyright 2010, SecurityFocus