High severity7.8NVD Advisory· Published Jan 7, 2019· Updated Jun 17, 2026

CVE-2018-5410

Description

Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dokan Dev/Dokany2 versions
cpe:2.3:a:dokan-dev:dokany:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dokan-dev:dokany:*:*:*:*:*:*:*:*range: >=1.0.0.5000,<1.2.0.1000
- (no CPE)range: >=1.0.0.5000 <=1.2.0.1000
Dokan/Open Source File Systemv5
Range: 1.0.0.5000

Patches

Vulnerability mechanics

References

github.com/dokan-dev/dokany/releases/tag/v1.2.1.1000nvdPatchThird Party Advisory
www.exploit-db.com/exploits/46155/nvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/106274nvdThird Party AdvisoryVDB Entry
cwe.mitre.org/data/definitions/121.htmlnvdThird Party Advisory
kb.cert.org/vuls/id/741315/nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000