critical9.8
CVE-2017-5005
Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and ear…
Impact
Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quickheal | Antivirus Pro | through 10.1.0.316 |
| Quickheal | Internet Security | through 10.1.0.316 |
| Quickheal | Total Security | through 10.1.0.316 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95194
- http://www.securitytracker.com/id/1037547
- https://github.com/payatu/QuickHeal
- https://www.youtube.com/watch?v=h9LOsv4XE00
- http://www.securityfocus.com/bid/95194
- http://www.securitytracker.com/id/1037547
- https://github.com/payatu/QuickHeal
- https://www.youtube.com/watch?v=h9LOsv4XE00