Unspecified Vulnerability in Quick Heal Internet Security, Total Security and AntiVirus Pro (CNVD-2017-07051)

Quick Heal Internet Security, Quick Heal Total Security and Quick Heal AntiVirus Pro are antivirus programs from Quick Heal India. An unspecified vulnerability exists in Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316 and Quick Heal AntiVirus Pro 10.1.0.316. This...

CVE-2017-8774

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

Heap overflow

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADERV1PACKED. This vulnerability can be...

CVE-2017-8775

CVE-2017-8775 affects Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316. The issue is described as Memory Corruption while parsing a malformed Mach-O file. The connected documents corroborate this as a vulnerability in the affec...

CVE-2017-8776

CVE-2017-8776 affects Quick Heal Internet Security, Total Security, and AntiVirus Pro 10.1.0.316. Connected documents confirm a root cause: approximately 165 PE files in the default installation do not use ASLR/DEP protections, leaving the product with reduced defenses against directed attacks. I...

CVE-2017-8774

CVE-2017-8774 affects Quick Heal Internet Security, Total Security and AntiVirus Pro (10.1.0.316). The vulnerability is a Memory Corruption issue triggered while parsing a malformed Mach-O file, per multiple sources (NVD and CNVD). CVSS scores indicate a HIGH to CRITICAL impact: CVSS v3.1 base sc...

CVE-2017-8775

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file...

CVE-2017-8776

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the...

Bitdefender Total Security DLL Loading Local Code Injection Vulnerability

Bitdefender Total Security is prone to local code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple Avira Product DLL Load Local Code Injection Vulnerabilities

Avira Total Security Suite and others are antivirus programs from the German company Little Red Umbrella Avira. A local code injection vulnerability exists in several Avira products. A local attacker can exploit this vulnerability to execute arbitrary code in the context of a system running in an...

CVE-2017-6186

Code injection vulnerability in Bitdefender Total Security 12.0 and earlier, Internet Security 12.0 and earlier, and Antivirus Plus 12.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a...

CVE-2017-6417

Code injection vulnerability in Avira Total Security Suite 15.0 and earlier, Optimization Suite 15.0 and earlier, Internet Security Suite 15.0 and earlier, and Free Security Suite 15.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full...

CVE-2017-6417

CVE-2017-6417 is a local code-injection vulnerability in Avira products (Total Security Suite 15.0 and earlier, Optimization Suite 15.0 and earlier, Internet Security Suite 15.0 and earlier, Free Security Suite 15.0 and earlier) enabling a local attacker to bypass the vendors’ self-protection and...

CVE-2017-6186

Bitdefender products Bitdefender Total Security 12.0 and earlier, Bitdefender Internet Security 12.0 and earlier, and Bitdefender Antivirus Plus 12.0 and earlier are listed as vulnerable to a local code-injection attack (CVE-2017-6186) via a DoubleAgent technique. The root cause described across ...

Kaspersky Total Security < 17.0.0.611 Multiple Vulnerabilities

Kaspersky Total Security is prone to multiple denial of service DoS and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

KLA10947 Denial of service vulnerability in Kaspersky products

Vulnerability was found in window broadcast message handling functionality of Kaspersky products. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited locally via a specially designed unhandled window messages, which cause termination...

CVE-2017-5005

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LCUNIXTHREAD.cmdsize field in a Mach-O file that is mishandle...

Multiple vulnerabilities in the Kaspersky Total Security antivirus protection system allow attackers to obtain confidential information.

The multiple vulnerabilities of the KLDISK driver in the Kaspersky Total Security antivirus protection software are related to the lack of protection for operational data. Exploiting these vulnerabilities could allow an intruder, operating locally, to gain access to confidential information—such ...

Multiple Kaspersky Products Information Disclosure Vulnerabilities

Kaspersky Internet Security is a suite of security software that combines antivirus and firewall functionality.Kaspersky Antivirus and Total Security are both antivirus programs from Kaspersky Labs. An information disclosure vulnerability exists in several Kaspersky products, which could be...

Local Denial of Service Vulnerability in Multiple Kaspersky Products

Kaspersky Internet Security is a suite of security software that combines the functions of an antivirus and a firewall.Kaspersky Antivirus/Total Security is an antivirus program from Kaspersky Labs. A local denial of service vulnerability exists in several Kaspersky products, which could be...