Dokan file system driver contains a stack-based buffer overflow
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.6%
from disclosure to weapon7 days
Published on NVDJan 7
1st PoC+7d
exploitation probability
1.6%top 27% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.
Affected products
Dokan · Open Source File Systempublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/46155cve_referencewww.exploit-db.com/exploits/46155/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.