CVE-2008-1139

CVE-2008-1139 describes a local privilege escalation vulnerability in DESlock+ versions 3.2.6 and earlier. Specifically, it allows a local attacker to gain SYSTEM privileges by overwriting a kernel pointer via a crafted DLMFENC_IOCTL request to the DLKPFSD_Device. This vulnerability carries a high severity CVSS score of 7.2, indicating a complete compromise of confidentiality, integrity, and availability, with low attack complexity. While not listed on the CISA KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.