Desktop Software

Memory Corruption

Memory Corruption Mach-O 2

Quick Heal Internet Security Memory Corruption Vulnerability We found that the Quick Heal Internet Security is vulnerable to Memory Corruption while parsing malformed Mach-O file.

9.8
/ 10
Critical
CVSS v3.1
ADVISORY ID
PS10
PUBLISHED
2022-10-02
CVE IDs
CVE-2017-8775
VENDORS
Quick Heal
PUBLIC EXPLOIT
None indexed
CWE
CWE-787
PRODUCT
Quick Heal Internet Security / Total Security / AntiVirus Pro
CVSS VECTOR
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Abstract blurred background with dark tones and smooth gradient waves of blue, purple, and orange hues.
Summary

Overview

Quick Heal Internet Security Memory Corruption Vulnerability

We found that the Quick Heal Internet Security is vulnerable to Memory Corruption while parsing malformed Mach-O file.

Vulnerability details

Vulnerability details

CVE-2017-8775
CWE-787
Critical | 9.8

Quick Heal Internet Security Memory Corruption Vulnerability We found that the Quick Heal Internet Security is vulnerable to Memory Corruption while parsing malformed Mach-O file.

Auth:
None (remote)
Impact:
Sensitive data disclosure, arbitrary data or code modification, denial of service
DISCLOSURE

Disclosure timeline

2016-06-25 Reported to vendor

2016-08-05 Patch released

References

Credits

Ashfaq Ansari – Project Srishti – Payatu Technologies