CVE-2015-4077

Currently unrated

Key Information:

Vendor
Fortinet
Status
Forticlient
Vendor
CVE Published:
3 September 2015

Summary

The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call.

References

http://www.coresecurity.com/advisories/forticlient-antivi...
x_refsource_MISC
http://packetstormsecurity.com/files/133398/FortiClient-A...
x_refsource_MISC
https://www.exploit-db.com/exploits/45149/
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.