923 matches found
Fortinet FortiClient Privilege Vulnerability
Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An elevation of privilege vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows a local user to obtain elevation of privilege via...
Fortinet FortiClient Unauthorized Operation Vulnerability
Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An unauthorized operation vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows a local user write to write to arbitrary memory...
CVE-2015-5737
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...
CVE-2015-5736
The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...
CVE-2015-5735
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...
Design/Logic Flaw
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...
Code injection
The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...
CVE-2015-4077
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...
Design/Logic Flaw
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...
Code injection
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...
CVE-2015-5737
FortiClient prior to version 5.2.4 is affected by CVE-2015-5737 (and related CIS-CWE IVs) due to several drivers (mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, mdare64_52.sys, Fortishield.sys) that improperly restrict access to process and Windows registry management APIs. The IOCTL 0x2220c8 ex...
CVE-2015-4077
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...
CVE-2015-5736
Fortinet FortiClient (Windows) before 5.2.4 is affected by CVE-2015-5736 via the Fortishield.sys minifilter. The IOCTL calls 0x220024 and 0x220028 allow a non-user-supplied callback to be set, enabling a local user to execute code with kernel privileges through the registered callback during IRP_...
CVE-2015-5735
CVE-2015-5735 affects Fortinet FortiClient before 5.2.4 via vulnerable drivers mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, and mdare64_52.sys. Using IOCTL 0x226108 allows a local user to write to arbitrary memory locations (kernel memory write). Fortinet released an updated FortiClient 5.2.4....
CVE-2015-5735
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...
CVE-2015-5737
The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...
CVE-2015-5736
The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...
CVE-2015-4077
Fortinet FortiClient 5.2.x affected drivers mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, and mdare64_52.sys. CVE-2015-4077 describes a local privilege escalation: IOCTL 0x22608C allows reading arbitrary kernel memory, enabling local users to read kernel contents. Fortinet fixed the issue in Fo...
