VulnCheck KEV: CVE-2016-6909

Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER...

CVE-2016-6909

CVE-2016-6909 is a confirmed Fortinet FortiOS/ FortiSwitch cookie parser buffer overflow vulnerability. A crafted HTTP request can trigger a buffer overflow in the cookie parser, enabling remote code execution. Affected products include FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, 4.3.x before...