Lucene search

[email protected]CVE-2017-8774

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-8774

2022-10-0316:23:06

CWE-787

[email protected]

web.nvd.nist.gov

quick heal

internet security

total security

antivirus pro

vulnerability

memory corruption

mach-o

cve-2017-8774

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.2%

JSON

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file.

Affected configurations

NVD

Node

quickhealantivirus_proRange≤10.1.0.316

quickhealinternet_securityRange≤10.1.0.316

quickhealtotal_securityRange≤10.1.0.316

CPENameOperatorVersion
quickheal:antivirus_proquickheal antivirus prole10.1.0.316
quickheal:internet_securityquickheal internet securityle10.1.0.316
quickheal:total_securityquickheal total securityle10.1.0.316

CPE	Name	Operator	Version
quickheal:antivirus_pro	quickheal antivirus pro	le	10.1.0.316
quickheal:internet_security	quickheal internet security	le	10.1.0.316
quickheal:total_security	quickheal total security	le	10.1.0.316

References

payatu.com/quick-heal-internet-security-memory-corruption-vulnerability/

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.2%

JSON

Related for CVE-2017-8774

prion1 nvd1 cvelist1 openvas3