{"cve":"CVE-2017-12840","nvd":{"published":"2017-08-28T19:29:00.697","modified":"2026-06-17T01:04:00.757","status":"Modified","description":"A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally exploitable heap based buffer overflow in the handling of an IOCTL message of type 0x0FA4204. The vulnerability is present due to the kernel driver failing to allocate sufficient memory on the kernel heap to contain a user supplied string as such the string is copied into a buffer of constant size (0x1000-bytes) and thus an overflow condition results. Access to the kernel driver is permitted through an obfuscated interface whereby bytes of user supplied message are \"authenticated\" via an obfuscation routine employing a linear equation.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-119"],"references":["https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-016/?fid=9946","https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-016/?fid=9946"],"products":["deslock:deslock\\+"],"source":"nvd","synced_at":"2026-10-19T20:44:47.710380879+00:00"},"epss":{"cve":"CVE-2017-12840","score":0.0033,"percentile":0.26166,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}