Skip to content
fr Sign in
4.7 Medium

CVE-2020-9295 FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and…

Description

FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately detect certain types of malformed or non-standard RAR archives, potentially containing malicious files. Based on the samples provided, FortiClient will detect the malicious files upon trying extraction by real-time scanning and FortiGate will detect the malicious archive if Virus Outbreak Prevention is enabled.

Affected products and versions

Product Affected versions Fixed in
FortiClientWindows 6.2 6.2.0 → 6.2.6 No fix stated
FortiClientWindows 6.0 6.0.0 → 6.0.10 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiClientWindows

The 30 CVEs of FortiClientWindows →
CVE-2026-84386 A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all… 4.7 Medium CVE-2026-70465 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows… 7.3 High CVE-2026-44278 A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,… 2.1 Low CVE-2025-62676 An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet… 6.4 Medium
Track this CVE