CVE-2018-5410

Name of the Vulnerable Software and Affected Versions: Dokan versions 1.0.0.5000 through 1.2.0.1000

Description: The issue is a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input to trigger the vulnerability. This issue was introduced in the 1.0.0.5000 version update.

Recommendations: For versions 1.0.0.5000 through 1.2.0.1000, consider disabling the dokan1.sys driver until a patch is available to prevent exploitation of the stack-based buffer overflow.