Fortinet FortiOS and FortiClient Antivirus Engine Vulnerability in RAR Archive Detection

A vulnerability exists in Fortinet FortiOS 6.2 and 6.4, as well as FortiClient 6.2, all running specific versions of the antivirus engine. These products may fail to promptly detect certain malformed or non-standard RAR archives that could contain malicious files. In the case of FortiClient, the detection occurs during extraction through real-time scanning. For FortiGate, the detection is possible if Virus Outbreak Prevention is activated.

Impact

Exploitation of this vulnerability could lead to a delayed detection of malicious files contained within certain RAR archives, allowing potential threats to go unnoticed until after extraction.