CVE-2017-12840

CVE-2017-12840 describes a heap-based buffer overflow in the DLMFENC.sys kernel driver, bundled with DESlock+ client application versions 4.8.16 and earlier. This vulnerability allows a local attacker to achieve privilege escalation due to insufficient memory allocation when handling a specific IOCTL message. With a CVSS score of 7.8 (High), successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of the affected system. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.