title: Dokan file system driver contains a stack-based buffer overflow
description: Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.5000 version update.
problem types: CWE-121: Stack-based Buffer Overflow
affected:
{
product: Open Source File System
vendor: Dokan
versions:
lessThan: 1.0.0.5000*, status: affected, version: 1.0.0.5000, versionType: custom
lessThanOrEqual: 1.2.0.1000, status: affected, version: 1.2.0.1000, versionType: custom
}
solutions: Dokan developers have released a new version, 1.2.1, that fixes this vulnerability by validating the user input.