POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon
This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version dependent and contains some hardcoded offsets which will most likely change from one system to another.