CVE-2017-8776
HighSummary
Quick Heal Internet Security, Total Security, and AntiVirus Pro version 10.1.0.316 contain approximately 165 PE files that do not use ASLR/DEP protection mechanisms. This exposes the product to targeted attacks.
Risk Assessment
The lack of adequate protection mechanisms increases the risk of successful attacks on systems using these products, potentially leading to data compromise.
Recommendation
It is recommended to update the software to the latest version that implements ASLR/DEP mechanisms to enhance system security.
Other vulnerabilities in Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, Quick Heal AntiVirus Pro 10.1.0.316
See all- CVE-2017-8775Critical
Quick Heal Internet Security, Quick Heal Total Security, and Quick Heal AntiVirus Pro are vulnerable to memory corruption while parsing a malformed Mach-O file.
- CVE-2017-8774Critical
Quick Heal Internet Security, Total Security, and AntiVirus Pro version 10.1.0.316 are vulnerable to memory corruption while parsing a malformed Mach-O file.
Original NVD description (English source)
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the product.