CVE-2009-1262

FortiClient 3.0.614 - Local Use-After-Free via VPN Connection Name Format String Specifiers

Title source: llm

Description

Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name.

References (10)

Core 10

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/502602/100/0/threaded

Various Sources x_refsource_misc

http://www.layereddefense.com/FortiClient02Apr.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34524

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/34343

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/53266

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/0941

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1021966

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/49633

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/502354/100/0/threaded

Scores

EPSS 0.0008

EPSS Percentile 22.7%

Details

CWE

CWE-134

Status published

Products (1)

fortinet/forticlient 3.0.614

Published Apr 07, 2009

Tracked Since Feb 18, 2026