PT-2022-20744 · Quick Heal · Quick Heal Total Security

Sandeep Kumar Singh · Published 2022-05-23 · Updated 2022-06-02 · CVE-2022-31467

Positive Technologies (AI Summary)

CVSS v3.1

7.9

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quick Heal Total Security versions prior to 12.1.1.27

Description A DLL hijacking issue allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code. This occurs because the installer does not restrict the search path for required DLLs and does not verify the signature of the DLLs it tries to load.

Recommendations For versions prior to 12.1.1.27, update to version 12.1.1.27 or later to resolve the issue. As a temporary workaround, consider restricting the search path for required DLLs during installation to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2022-31467

Affected Products

Quick Heal Total Security

References · 5

• https://osv.dev/vulnerability/CVE-2022-31467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31467 · Security Note
• https://t.me/cvenotify/30591 · Telegram Post
• https://t.me/cibsecurity/43190 · Telegram Post
• https://softwaresec001.wordpress.com/2022/05/13/dll-hijack-vulnerability-fixed-in-quick-heal-total-security · Note