Lucene search

[email protected]CVE-2017-5005

HistoryJan 02, 2017 - 10:59 p.m.

CVE-2017-5005

2017-01-0222:59:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2017-5005

buffer overflow

quick heal internet security

security vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

JSON

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation.

Affected configurations

NVD

Node

quickhealantivirus_proRange≤10.1.0.316

quickhealinternet_securityRange≤10.1.0.316

quickhealtotal_securityRange≤10.1.0.316

CPENameOperatorVersion
quickheal:antivirus_proquickheal antivirus prole10.1.0.316
quickheal:internet_securityquickheal internet securityle10.1.0.316
quickheal:total_securityquickheal total securityle10.1.0.316

CPE	Name	Operator	Version
quickheal:antivirus_pro	quickheal antivirus pro	le	10.1.0.316
quickheal:internet_security	quickheal internet security	le	10.1.0.316
quickheal:total_security	quickheal total security	le	10.1.0.316

References

www.securityfocus.com/bid/95194

www.securitytracker.com/id/1037547

github.com/payatu/QuickHeal

www.youtube.com/watch?v=h9LOsv4XE00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

JSON

Related for CVE-2017-5005

nvd1 cvelist1 prion1