PT-2017-16261 · Quick Heal · Quick Heal Antivirus Pro+2

Ashfaq Ansari · Publicado 2017-01-02 · Atualizado 2021-09-13 · CVE-2017-5005

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quick Heal Internet Security versions 10.1.0.316 and earlier Quick Heal Total Security versions 10.1.0.316 and earlier Quick Heal AntiVirus Pro versions 10.1.0.316 and earlier

Description The issue is related to a stack-based buffer overflow that can be triggered by a crafted LC UNIXTHREAD.cmdsize field in a Mach-O file. This occurs when the file is mishandled during a Security Scan operation, also known as a Custom Scan. This can allow remote attackers to execute arbitrary code.

Recommendations For Quick Heal Internet Security versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316. For Quick Heal Total Security versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316. For Quick Heal AntiVirus Pro versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2017-5005

Produtos afetados

Quick Heal Antivirus Pro

Quick Heal Internet Security

Quick Heal Total Security

Referências · 6

• 🔥 https://github.com/payatu/QuickHeal · Exploit
• 🔥 https://youtube.com/watch?v=h9LOsv4XE00 · Exploit
• https://osv.dev/vulnerability/CVE-2017-5005 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5005 · Nota de Segurança
• http://securityfocus.com/bid/95194 · Nota
• http://securitytracker.com/id/1037547 · Nota