PT-2015-7058 · Fortinet · Forticlient

Enrique Nissim · Publicado 2015-09-03 · Atualizado 2018-10-09 · CVE-2015-5735

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4

Description The issue allows local users to write to arbitrary memory locations via a specific ioctl call, 0x226108, in certain drivers.

Recommendations For versions prior to 5.2.4, update to version 5.2.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-5735

Produtos afetados

Forticlient

Referências · 7

• http://coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities · Nota
• http://seclists.org/fulldisclosure/2015/Sep/0 · Nota
• http://securitytracker.com/id/1033439 · Nota
• http://securityfocus.com/archive/1/536369/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5735 · Nota de Segurança
• http://packetstormsecurity.com/files/133398/FortiClient-Antivirus-Information-Exposure-Access-Control.html · Nota
• http://fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient · Aviso do Fabricante