SiS Windows VGA Display Manager 6.14.10.3930 Multiple Privilege Escalation

KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege Escalation Title: SiS Windows VGA Display Manager Multiple Privilege Escalation Advisory ID: KL-001-2015-003 Publication Date: 2015.09.01 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-003.txt 1...

Amazon Linux: Security Advisory (ALAS-2012-34)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fortinet FortiClient Privilege Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An elevation of privilege vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows a local user to obtain elevation of privilege via...

Fortinet FortiClient Arbitrary Code Execution Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end-users with antivirus, encryption, and other services. An arbitrary code vulnerability exists in Fortinet FortiClient versions prior to 5.2.4, which allows local users to execute arbitrary code with kernel privileges b...

CVE-2015-5736

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...

CVE-2015-5735

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

Code injection

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...

Design/Logic Flaw

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...

Design/Logic Flaw

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

CVE-2015-5735

CVE-2015-5735 affects Fortinet FortiClient before 5.2.4 via vulnerable drivers mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, and mdare64_52.sys. Using IOCTL 0x226108 allows a local user to write to arbitrary memory locations (kernel memory write). Fortinet released an updated FortiClient 5.2.4....

CVE-2015-5737

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...

CVE-2015-5735

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

CVE-2015-5736

Fortinet FortiClient (Windows) before 5.2.4 is affected by CVE-2015-5736 via the Fortishield.sys minifilter. The IOCTL calls 0x220024 and 0x220028 allow a non-user-supplied callback to be set, enabling a local user to execute code with kernel privileges through the registered callback during IRP_...

CVE-2015-5736

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...

CVE-2015-5737

FortiClient prior to version 5.2.4 is affected by CVE-2015-5737 (and related CIS-CWE IVs) due to several drivers (mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, mdare64_52.sys, Fortishield.sys) that improperly restrict access to process and Windows registry management APIs. The IOCTL 0x2220c8 ex...

CVE-2015-4077

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...

PT-2015-7058

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue allows local users to write to arbitrary memory locations via a specific ioctl call, 0x226108, in certain drivers. Recommendations For versions prior to 5.2.4, update to version 5.2.4 o...

PT-2015-6410

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue allows local users to read arbitrary kernel memory. This is achieved via a specific ioctl call, 0x22608C, to certain drivers, including mdare64 48.sys, mdare32 48.sys, mdare32 52.sys, a...

PT-2015-7059

Name of the Vulnerable Software and Affected Versions Fortinet FortiClient versions prior to 5.2.4 Description The issue allows local users to execute arbitrary code with kernel privileges. This is achieved by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call, specifically...

PT-2015-7060

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue concerns the mdare64 48.sys, mdare32 48.sys, mdare32 52.sys, mdare64 52.sys, and Fortishield.sys drivers in FortiClient. These drivers do not properly restrict access to the API for...