Fortinet FortiClient Online Installer up to 6.0.5 on Windows DLL Loader FortiClientOnlineInstaller.exe Search Path memory corruption

A vulnerability has been found in Fortinet FortiClient Online Installer up to 6.0.5 on Windows and classified as critical. This vulnerability affects a functionality of the file FortiClientOnlineInstaller.exe of the component DLL Loader. The manipulation as part of a Search Path leads to a memory corruption vulnerability (Code Execution). The CWE definition for the vulnerability is CWE-119. As an impact it is known to affect confidentiality, integrity, and availability.

The bug was discovered 05/16/2019. The weakness was published 05/28/2019. The advisory is available at fortiguard.com. This vulnerability was named CVE-2019-5589 since 01/07/2019. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 12 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 6.0.6 eliminates this vulnerability.

Similar entries are available at 2, 3, 4 and 5.

Vendor

• Fortinet

Name

• FortiClient Online Installer

• 🔒
• 🔒
• 🔒

• 🔒
• 🔒
• 🔒

VulDB Meta Base Score: 7.3
VulDB Meta Temp Score: 7.0

VulDB Base Score: 7.3
VulDB Temp Score: 7.0
VulDB Vector: 🔒
VulDB Reliability: 🔍

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Class: Memory corruption / Code Execution (CWE-119)
Local: No
Remote: Yes

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Upgrade
Status: 🔍

0-Day Time: 🔒

Upgrade: FortiClient Online Installer 6.0.6

01/07/2019 CVE assigned
05/16/2019 +129 days Vulnerability found
05/28/2019 +12 days Advisory disclosed
05/29/2019 +1 days VulDB entry created
05/29/2019 +0 days VulDB last updateVendor: fortinet.com

Advisory: fortiguard.com

CVE: CVE-2019-5589 (🔒)
OSVDB: - Fortinet FortiClient for Windows DLL code execution

See also: 🔒

Created: 05/29/2019 08:22 AM
Complete: 🔍

Comments

Comments are closed.