CVE-2015-4077 The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioc...
LowCVSS 2.1
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet forticlient | <= 5.2.3 | No fix listed |
References
- fortiguard.com
- packetstormsecurity.com
- 20150901 [CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities mailing-list
- www.coresecurity.com vendor-advisory
- www.fortiguard.com vendor-advisory
- 20150901 [CORE-2015-0013] - FortiClient Antivirus Multiple Vulnerabilities mailing-list
- 1033439 vdb-entry
- 45149 exploit