CVE-2015-5736
The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a (1) 0x220024 or (2) 0x220028 ioctl call.
Date published : 2015-09-03
http://www.securityfocus.com/archive/1/536369/100/0/threaded
http://fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient