CVE-2017-8776

High

Description

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the product.

SeverityHigh
CVSS7.5
Exploit probability—
ProductQuickheal Antivirus Pro
PublishedMay 4, 2017
First seenMay 4, 2017

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
quickheal antivirus_prov ≤ 10.1.0.316—
quickheal internet_securityv ≤ 10.1.0.316—
quickheal total_securityv ≤ 10.1.0.316—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2017-8776 · Quickheal Antivirus Pro · Dark Radar