CVE-2017-8775

CVE-2017-8775 affects Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316. The issue is described as Memory Corruption while parsing a malformed Mach-O file. The connected documents corroborate this as a vulnerability in the affec...

CVE-2017-8774

CVE-2017-8774 affects Quick Heal Internet Security, Total Security and AntiVirus Pro (10.1.0.316). The vulnerability is a Memory Corruption issue triggered while parsing a malformed Mach-O file, per multiple sources (NVD and CNVD). CVSS scores indicate a HIGH to CRITICAL impact: CVSS v3.1 base sc...

CVE-2017-8776

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the...

CVE-2017-8774

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

CVE-2017-8776

CVE-2017-8776 affects Quick Heal Internet Security, Total Security, and AntiVirus Pro 10.1.0.316. Connected documents confirm a root cause: approximately 165 PE files in the default installation do not use ASLR/DEP protections, leaving the product with reduced defenses against directed attacks. I...

CVE-2017-8773: Out-of-bounds Write

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADERV1PACKED. This vulnerability can be...

CVE-2017-8774: Out-of-bounds Write

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

PT-2017-2613

Name of the Vulnerable Software and Affected Versions Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 Description The issue is caused by a buffer overflow in memory, which can be exploited by a remote attacke...

PT-2017-18519

Name of the Vulnerable Software and Affected Versions Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 Description The issue concerns the lack of Address Space Layout Randomization ASLR and Data Execution...

PT-2017-2116

Name of the Vulnerable Software and Affected Versions Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 AVG Internet Security affected versions not specified Description The issue is related to memory corruptio...

CVE-2017-8776: Undefined Security Weakness

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the...

CVE-2017-8775: Out-of-bounds Write

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

PT-2017-2614

Name of the Vulnerable Software and Affected Versions Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 Description The issue is caused by a buffer overflow in the dynamic memory due to insufficient validation ...

DEBIAN-CVE-2017-8112

hw/scsi/vmwpvscsi.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and CPU consumption via the message ring page count...

CVE-2017-8112

CVE-2017-8112 affects QEMU (hw/scsi/vmw_pvscsi.c). The vulnerability allows a local guest OS user with privileges to trigger an infinite loop in the message ring page count, causing a denial of service (CPU exhaustion). The provided documents do not specify a vendor/version scope or a remediation...

CVE-2017-8086

CVE-2017-8086: In QEMU, a memory leak in v9fs_list_xattr (hw/9pfs/9p-xattr.c) can be triggered by the orig_value path, allowing local privileged guest users to cause denial of service via memory consumption. Public metrics show CVSSv2/3 for this issue (4.9, 6.5). The connected advisories (e.g., D...

CVE-2017-8112

hw/scsi/vmwpvscsi.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and CPU consumption via the message ring page count...

UBUNTU-CVE-2017-7980

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator Qemu 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service crash via vectors related to a VNC client updating its display after a VGA operation...

CVE-2017-7980

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator Qemu 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service crash via vectors related to a VNC client updating its display after a VGA operation...

iOS Apple ID Identifier

The vulnerability of the iOS operating system’s Accounts component is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain an Apple ID, by taking advantage of authentication vulnerabilities during a quick screen lock in iCloud...