CVE-2017-5005

Name of the Vulnerable Software and Affected Versions Quick Heal Internet Security versions 10.1.0.316 and earlier Quick Heal Total Security versions 10.1.0.316 and earlier Quick Heal AntiVirus Pro versions 10.1.0.316 and earlier

Description The issue is related to a stack-based buffer overflow that can be triggered by a crafted LC UNIXTHREAD.cmdsize field in a Mach-O file. This occurs when the file is mishandled during a Security Scan operation, also known as a Custom Scan. This can allow remote attackers to execute arbitrary code.

Recommendations For Quick Heal Internet Security versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316. For Quick Heal Total Security versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316. For Quick Heal AntiVirus Pro versions 10.1.0.316 and earlier, update to a version later than 10.1.0.316.