QuickHeal

QuickHeal 适用于 Quick Heal 杀毒软件的 CVE-2017-5005 安全公告 对内存缓冲区边界内的操作限制不当 漏洞。 该软件对内存缓冲区执行操作，但可能读取或写入到超出缓冲区预期边界的内存位置。 漏洞描述 我们发现 Quick Heal Internet Security 因对 LCUNIXTHREAD.cmdsize（Mach-O ）验证不当，存在栈缓冲区越界写入 漏洞。 此漏洞可被利用来实现远程代码执行 以及权限提升 。 概念验证 Quick Heal 漏洞利用演示 厂商 http://www.quickheal.co.in/ 受影响产品 Quick Heal...

CVE-2017-8775

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

CVE-2017-8774

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

Quick Heal Internet Security Version Detection

Detects the installed version of Quick Heal Internet Security. The script logs in via smb, searches for Quick Heal Internet Security in the registry and gets the version from registry. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

CVE-2017-8774

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

CVE-2017-8775

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

CVE-2017-5005

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LCUNIXTHREAD.cmdsize field in a Mach-O file that is mishandle...

CVE-2017-5005

CNVD-2017-00081 and NVD/CVE-2017-5005 describe a stack-based buffer overflow affecting Quick Heal Internet Security, Total Security, and AntiVirus Pro on OS X (Mach-O) triggered by a crafted LC_UNIXTHREAD.cmdsize field during a Security Scan/Custom Scan. The vulnerability allows remote code execu...