CVE-2018-5410— Dokan file system driver contains a stack-based buffer overflow
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-5410
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dokan file system driver contains a stack-based buffer overflow
Source: NVD (National Vulnerability Database)
Vulnerability Description
Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Dokan 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dokan是一款用于在Windows平台下创建用户级文件系统的库。 Dokan 1.0.0.5000版本至1.2.0.1000版本中的dokan1.sys驱动程序存在基于栈的缓冲区溢出漏洞。攻击者可利用该漏洞损坏内核内存，提升系统权限进而控制系统。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dokan | Open Source File System | 1.0.0.5000 ~ 1.0.0.5000* | - |
II. Public POCs for CVE-2018-5410
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-5410
请登录查看更多情报信息。
- https://github.com/dokan-dev/dokany/releases/tag/v1.2.1.1000x_refsource_CONFIRM
- https://cwe.mitre.org/data/definitions/121.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2018-5410
IV. Related Vulnerabilities
Same weakness: CWE-121
- CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo - CVE-2026-8234
EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based - CVE-2026-6665
PgBouncer buffer overflow in SCRAM - CVE-2026-41509
Integer underflow in crypto_sign_open() leads to buffer over - CVE-2026-8138
Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based
V. Comments for CVE-2018-5410
No comments yet