Affiliation/Organization: Fortinet's FortiGuard Labs


Time to Patch Stats

For vulnerabilities disclosed through this affiliation where we have sufficient data to calculate the time to patch (3 vulns), the following statistics apply:

Min Time To Patch:84 days
Avg Time To Patch:450 days
Max Time To Patch:876 days

Other Affiliations

Creditees Affiliated with Fortinet's FortiGuard Labs have also affiliated with:

McAfee (2)
Microsoft Vulnerability Research (1)
Nevis Labs (1)
Microsoft (1)
Palo Alto Networks (1)

Website: http://www.fortiguard.com/

Creditees currently or formerly associated with Fortinet's FortiGuard Labs (15):
(ordered by association date)

Known SinceNameVulns Through Affiliation
2005-02-04Xin Ouyang2
2005-04-04HongZhen Zhou1
2005-12-01Louis Wang3
2006-03-14Dejun Meng6
2006-07-05Haifei Li14
2006-10-10Fortinet2
2007-01-09Jie Ma1
2008-02-12Bing Liu21
2009-10-13XiaoPeng Zhang8
2009-10-13Zhenhua Liu5
2010-05-11Chro HD6
2010-08-25Honggang Ren29
2012-02-15Xu Liu2
2012-06-08Kai Lu1
2013-03-15Dehui Yin1

Disclosed Vulnerabilities (96):

Discl. DateOSVDB IDCVE IDCrediteesTitle
2013-04-09 92137 2013-1384 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption (2013-1384)
2013-03-15 91438 2013-1750 Dehui Yin
 RealPlayer MP4 File Parsing Heap Buffer Overflow
2013-02-12 90112 2013-0635 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption
2012-10-23 86541 2012-5273 Honggang Ren
 Adobe Shockwave Player Unspecified Overflow (2012-5273)
2012-08-21 84791 2012-4165 Honggang Ren
 Adobe Flash Player / AIR Unspecified Memory Corruption (2012-4165)
2012-08-21 84792 2012-4166 Honggang Ren
 Adobe Flash Player / AIR Unspecified Memory Corruption (2012-4166)
2012-08-21 84789 2012-4163 Xu Liu
 Adobe Flash Player / AIR Unspecified Memory Corruption (2012-4163)
2012-08-14 84611 2012-2046 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption (2012-2046)
2012-08-14 84612 2012-2047 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption (2012-2047)
2012-08-14 84608 2012-2043 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption (2012-2043)
2012-06-08 82722 2012-2037 Kai Lu
 Adobe Flash Player Unspecified Memory Corruption (2012-2037)
2012-05-23 82138 XiaoPeng Zhang
Alex Chapman
 Citrix XenApp Unspecified Remote DoS
2012-05-08 81751 2012-2032 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption (2012-2032)
2012-05-08 81752 2012-2033 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption (2012-2033)
2012-02-15 79297 2012-0751 Xu Liu
 Adobe Flash Player Unspecified ActiveX Remote Memory Corruption
2012-02-14 79241 2012-0761 Honggang Ren
 Adobe Shockwave Player Shockwave 3D Asset Unspecified Memory Corruption (2012-0761)
2012-02-14 79242 2012-0762 Honggang Ren
 Adobe Shockwave Player Shockwave 3D Asset Unspecified Memory Corruption (2012-0762)
2012-02-14 79244 2012-0764 Honggang Ren
 Adobe Shockwave Player Shockwave 3D Asset Unspecified Memory Corruption (2012-0764)
2012-02-14 79240 2012-0760 Honggang Ren
 Adobe Shockwave Player Shockwave 3D Asset Unspecified Memory Corruption (2012-0760)
2012-02-14 79243 2012-0763 Honggang Ren
 Adobe Shockwave Player Shockwave 3D Asset Unspecified Memory Corruption (2012-0763)
2012-02-14 79245 2012-0766 Honggang Ren
 Adobe Shockwave Player Shockwave 3D Asset Unspecified Memory Corruption (2012-0766)
2012-02-14 79237 2012-0757 Honggang Ren
 Adobe Shockwave Player Shockwave 3D Asset Unspecified Memory Corruption (2012-0757)
2011-09-21 75626 2011-2426 Bing Liu
 Adobe Flash Player AVM2 Function Parameter Handling Overflow
2011-08-09 74427 2011-2421 Honggang Ren
 Adobe Shockwave Player Dirapi.dll Director Movie File Handling Unspecified Memory Corruption
2011-08-09 74441 2011-2415 Bo Qu
Honggang Ren
 Adobe Flash Player Unspecified Overflow (2011-2415)
2011-08-09 74444 2011-2425 Honggang Ren
 Adobe Flash Player Unspecified Memory Corruption (2011-2425)
2011-06-15 73016 2011-0335 Honggang Ren
Carsten Eiram
Aaron Portnoy
Logan Brown
Aniway
Luigi Auriemma
Luigi Auriemma
 Adobe Shockwave Player dirapi.dll Module RIFF-based Director File Multiple Value Remote Code Execution
2011-06-15 72920 2011-1272 Bing Liu
 Microsoft Office Excel Insufficient Record Validation Unspecified Arbitrary Code Execution
2011-05-12 72336 2011-0622 Honggang Ren
 Adobe Flash Player Unspecified Memory Corruption (2011-0622)
2011-04-12 71767 2011-0107 Haifei Li
 Microsoft Office Path Subversion Arbitrary DLL Injection Code Execution
2011-02-28 71550 2011-1141 XiaoPeng Zhang
 Wireshark LDAP Dissector Filter String Memory Consumption DoS
2011-02-08 71374 2011-0563 Bing Liu
 Adobe Reader / Acrobat Unspecified Memory Corruption Code Execution (2011-0563)
2011-02-08 71373 2011-0570 Haifei Li
 Adobe Reader / Acrobat Unspecified Library Loading Code Execution (2011-0570)
2011-02-08 70833 2011-0038 Haifei Li
 Microsoft IE Insecure Library Loading Remote Code Execution
2010-12-14 69823 2010-3963 Honggang Ren
 Microsoft Windows Routing and Remote Access NDProxy Unspecified Local Code Execution
2010-12-14 69816 2010-3966 Haifei Li
 Microsoft Windows BranchCache Path Subversion Arbitrary DLL Injection Code Execution
2010-12-07 69757 2010-4009 Honggang Ren
 Apple QuickTime Crafted Movie File Handling Overflow
2010-11-12 69316 2010-3790 Honggang Ren
 Apple Mac OS X QuickTime Crafted Movie File Memory Corruption
2010-11-10 69089 2010-3337 Haifei Li
Simon Raner
 Microsoft Office Insecure Library Loading Remote Code Execution
2010-11-04 69135 2010-3637 XiaoPeng Zhang
 Adobe Flash ActiveX Unspecified Memory Corruption (2010-3637)
2010-10-28 69192 2010-4085 Honggang Ren
 Adobe Shockwave Player dirapi.dll Director File Crafted pamm Chuck Memory Corruption (2010-4085)
2010-10-05 68428 2010-3628 Bing Liu
Bing Liu
 Adobe Reader / Acrobat Unspecified Memory Corruption (2010-3628)
2010-08-25 67423 2010-2863 Honggang Ren
 Adobe Shockwave Player Unspecified Memory Corruption Arbitrary Code Execution
2010-08-25 67428 2010-2864 Honggang Ren
Rodrigo Rubira Branco (BSDaemon)
 Adobe Shockwave Player IML32.dll DIR Media File 0x24C6 Offset Memory Corruption
2010-08-25 67422 2010-2865 Honggang Ren
 Adobe Shockwave Player Unspecified DoS
2010-06-10 65575 2010-2163 Will Dormann
Bing Liu
Tavis Ormandy
 Adobe Flash Player / AIR Multiple Unspecified Arbitrary Code Execution (2010-2163)
2010-06-10 65578 2010-2166 Bing Liu
 Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2166)
2010-06-08 65233 2010-0823 Bing Liu
 Microsoft Office Excel Unspecified Memory Corruption (2010-0823)
2010-05-11 64651 2010-1286 Chro HD
 Adobe Shockwave Player Unspecified Memory Corruption (2010-1286)
2010-05-11 64652 2010-1287 Chro HD
 Adobe Shockwave Player Unspecified Memory Corruption (2010-1287)
2010-05-11 64653 2010-1289 Chro HD
 Adobe Shockwave Player Unspecified Memory Corruption (2010-1289)
2010-05-11 64654 2010-1290 Chro HD
 Adobe Shockwave Player Unspecified Memory Corruption (2010-1290)
2010-05-11 64655 2010-1291 Chro HD
 Adobe Shockwave Player Unspecified Memory Corruption (2010-1291)
2010-05-11 64656 2010-1288 Chro HD
 Adobe Shockwave Player Unspecified Overflow
2010-01-21 61913 2010-0247 Haifei Li
 Microsoft IE HTML Object Handling Unspecified Memory Corruption
2009-12-16 61126 2009-2876 Zhenhua Liu
XiaoPeng Zhang
 Cisco WebEx WRF Player WRF File Handling Unspecified Overflow (CVE-2009-2876)
2009-12-16 61128 2009-2878 Zhenhua Liu
XiaoPeng Zhang
 Cisco WebEx WRF Player WRF File Handling Unspecified Overflow (CVE-2009-2878)
2009-12-08 60857 2009-4210 Bing Liu
 Microsoft Windows Indeo Codec Unspecified Memory Corruption
2009-12-08 60858 2009-4313 Anonymous
Paule Byrne
Anonymous
Bing Liu
Dave Lenoe
Will Dormann
 Microsoft Windows Intel Indeo32 Codec (ir32_32.dll) IV32 FourCC Code Handling Heap Corruption
2009-12-08 60830 2009-0102 Bing Liu
 Microsoft Office Project File Handling Memory Validation Arbitrary Code Execution
2009-10-13 58907 2009-2987 Zhenhua Liu
XiaoPeng Zhang
 Adobe Reader / Acrobat on Windows ActiveX Unspecified DoS
2009-10-13 58911 2009-2988 Zhenhua Liu
XiaoPeng Zhang
 Adobe Reader / Acrobat Unspecified Input Validation DoS (2009-2988)
2009-10-13 58923 2009-2996 Zhenhua Liu
XiaoPeng Zhang
 Adobe Reader / Acrobat Unspecified Memory Corruption (2009-2996)
2009-10-13 58914 2009-3460 Haifei Li
 Adobe Acrobat Unspecified Memory Corruption (2009-3460)
2009-07-13 55806 2009-1136 Peter Vreugdenhil
Haifei Li
 Microsoft Office Web Components OWC10.Spreadsheet ActiveX msDataSourceObject() Method Memory Corruption
2009-06-10 54953 2009-0557 Bing Liu
 Microsoft Office Excel Malformed Object Record Corruption Remote Code Execution
2009-06-09 54946 2009-1141 Haifei Li
 Microsoft IE DHTML tr Element Handling Crafted Method Memory Corruption
2009-06-09 54952 2009-0549 Bing Liu
 Microsoft Office Excel Malformed Record Object Pointer Handling Remote Code Execution (2009-0549)
2009-06-09 54956 2009-0560 Bing Liu
 Microsoft Office Excel Record Object Field Sanitization Memory Corruption
2009-04-14 53662 2009-0087 Fortinet
 Microsoft WordPad / Office Text Converter Malformed Data Handling Memory Corruption
2009-04-14 53665 2009-0100 Haifei Li
 Microsoft Office Excel Malformed Object Handling Memory Corruption
2009-02-23 52695 2009-0238 Haifei Li
 Microsoft Office Excel Crafted Document Invalid Object Reference Unspecified Code Execution
2009-02-10 51836 2009-0097 Bing Liu
 Microsoft Office Visio File Opening Memory Functions Arbitrary Code Execution
2009-02-10 51834 2009-0095 Bing Liu
 Microsoft Office Visio File Opening Object Data Handling Arbitrary Code Execution
2009-02-10 51835 2009-0096 Bing Liu
 Microsoft Office Visio Object Data Memory Functions Arbitrary Code Execution
2008-09-09 47966 2008-3012 Bing Liu
 Microsoft Multiple Products GDI+ EMF File Handling Memory Corruption
2008-05-13 45033 2008-0119 Haifei Li
 Microsoft Publisher Object Handler Header Data Validation Arbitrary Code Execution
2008-03-11 42724 2008-0114 Bing Liu
 Microsoft Excel Style Record Handling Memory Corruption
2008-02-12 41446 2008-0102 Bing Liu
 Microsoft Office Publisher .pub File Handling Arbitrary Code Execution
2008-02-12 41447 2008-0104 Bing Liu
 Microsoft Office Publisher Memory Index Validation .pub File Handling Arbitrary Code Execution
2007-05-08 34404 2007-2221 Haifei Li
 Microsoft IE Media Service Component Arbitrary File Rewrite
2007-01-09 31249 2007-0028
2006-3432		 Jie Ma
 Microsoft Excel Malformed Record Memory Access Code Execution
2006-10-10 29427 2006-3434 Dejun Meng
 Microsoft Office Crafted String Unspecified Arbitrary Code Execution
2006-10-10 29439 2006-4696 Fortinet
 Microsoft Windows Server Service Crafted SMB Packet Unspecified Issue
2006-10-10 29447 2006-3876 Dejun Meng
 Microsoft PowerPoint Crafted PPT Data Record Code Execution
2006-07-14 27324 2006-3590 Elia Florio
Dejun Meng
Shih-hao Weng
 Microsoft PowerPoint mso.dll PPT Processing Arbitrary Code Execution
2006-07-11 27147 2006-0033 Dejun Meng
 Microsoft Office PNG Processing Unspecified Code Execution
2006-07-05 27113 2006-3587 Haifei Li
 Adobe Flash Player Unspecified Arbitrary Code Execution
2006-06-13 26435 2006-0022 Nicolas Ruff
Fabrice Desclaux
Kostya Kortchinsky
Elia Florio
Dejun Meng
 Microsoft PowerPoint Malformed Record Arbitrary Code Execution
2006-03-14 23900 2006-0029 Dejun Meng
 Microsoft Office Excel Malformed Description Arbitrary Code Execution
2005-12-01 21544 2005-3991 Louis Wang
 phpMyChat start_page.css.php medium Parameter XSS
2005-12-01 21545 2005-3991 Louis Wang
 phpMyChat style.css.php medium Parameter XSS
2005-12-01 21546 2005-3991 Louis Wang
 phpMyChat users_popupL.php From Parameter XSS
2005-04-04 15242 2005-0035 HongZhen Zhou
NISCC
Robert Fly
 Adobe Reader LoadFile() Method Local File Enumeration
2005-03-02 14370 2005-0635 Xin Ouyang
 Foxmail Server USER Command Remote Overflow
2005-02-04 13579 2005-0339
2005-0636		 Xin Ouyang
 Foxmail Server MAIL FROM Command Remote Overflow

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

© Copyright 2002 - 2013 Open Source Vulnerability Database (OSVDB), All Rights Reserved.
Privacy Statement - Terms of Use