CVE-2013-6767

Quick Heal AntiVirus Pro 7.0.0.1 - Local Buffer Overflow via PE File Text Value

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-6767. PoCs published by Arash Allebrahim.

AI-analyzed exploit summary This exploit demonstrates a local stack buffer overflow vulnerability in QuickHeal AntiVirus 7.0.0.1 via a manipulated PE file. The PoC triggers the vulnerability by injecting a DLL into explorer.exe and manipulating the QuickHeal scanning process to crash the system.

Description

Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary code or cause a denial of service (process crash) via a long *.text value in a PE file.

Exploits (1)

exploitdb WORKING POC

by Arash Allebrahim · textlocalwindows

https://www.exploit-db.com/exploits/30374

View Code ZIP pw:eip

This exploit demonstrates a local stack buffer overflow vulnerability in QuickHeal AntiVirus 7.0.0.1 via a manipulated PE file. The PoC triggers the vulnerability by injecting a DLL into explorer.exe and manipulating the QuickHeal scanning process to crash the system.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: QuickHeal AntiVirus 7.0.0.1 (build 2.0.0.1)

No auth needed

Prerequisites: Local access to the target system · QuickHeal AntiVirus installed · Core scanning server service disabled

MITRE ATT&CK