Fortinet FortiClient Heap-Based Buffer Overflow Vulnerability via fortips Driver

A heap-based buffer overflow vulnerability has been identified in Fortinet FortiClient for Windows, specifically in versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.8. This vulnerability may allow an authenticated local IPSec user to execute arbitrary code or commands by exploiting the 'fortips_74.sys' driver. The attacker would need to bypass Windows heap integrity protections to successfully execute the attack.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code or commands on the affected system.

Remediation

Users can upgrade to Fortinet FortiClient Windows version 7.4.4 or above to address this vulnerability. For those on FortiClient Windows 7.2, upgrading to version 7.2.9 or above is recommended.