CVE-2017-5005
CriticalSummary
A stack-based buffer overflow in Quick Heal Internet Security, Total Security, and AntiVirus Pro allows remote attackers to execute arbitrary code. This affects version 10.1.0.316 and earlier on OS X.
Risk Assessment
An attacker could remotely take control of the system, posing a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and conduct a security audit of the systems.
Original NVD description (English source)
Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LC_UNIXTHREAD.cmdsize field in a Mach-O file that is mishandled during a Security Scan (aka Custom Scan) operation.