7.5
CVSSv2

CVE-2017-5005

Published: 02/01/2017 Updated: 13/09/2021
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and previous versions, Total Security 10.1.0.316 and previous versions, and AntiVirus Pro 10.1.0.316 and previous versions on OS X allows remote malicious users to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

quickheal antivirus pro

quickheal internet security

quickheal total security

Github Repositories

CVE-2017-5005 for Quick Heal Antivirus

QuickHeal CVE-2017-5005 for Quick Heal Antivirus Advisory Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer Vulnerability Description We found that the Quick Heal Internet Security is