CVE-2017-5005

CRITICAL

Quick Heal Internet Security <10.1.0.316 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation.

Exploits (1)

nomisec WRITEUP 15 stars

by payatu · poc

https://github.com/payatu/QuickHeal

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/95194

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1037547

[Exploit, Third Party Advisory] https://github.com/payatu/QuickHeal

[Exploit, Third Party Advisory] https://www.youtube.com/watch?v=h9LOsv4XE00

Scores

CVSS v3 9.8

EPSS 0.3062

EPSS Percentile 96.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (3)

quickheal/antivirus_pro < 10.1.0.316

quickheal/internet_security < 10.1.0.316

quickheal/total_security < 10.1.0.316

Published Jan 02, 2017

Tracked Since Feb 18, 2026