PT-2018-18425

CVE-2018-8090

·

Publicado

2018-07-25

·

Atualizado

2021-09-13

Descrição por

CVSS 3.1
7.8
Alta
MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Quick Heal Total Security 64 bit 17.00 versions 10.0.1.38 Quick Heal Total Security 32 bit 17.00 versions 10.0.1.38 Quick Heal Internet Security 64 bit 17.00 versions 10.0.0.37 Quick Heal Internet Security 32 bit 17.00 versions 10.0.0.37 Quick Heal AntiVirus Pro 64 bit 17.00 versions 10.0.0.37 Quick Heal AntiVirus Pro 32 bit 17.00 versions 10.0.0.37
Description: The issue is related to DLL Hijacking due to Insecure Library Loading. This allows for potential exploitation.
Recommendations: For Quick Heal Total Security 64 bit 17.00 version 10.0.1.38, update to a version that addresses the Insecure Library Loading issue. For Quick Heal Total Security 32 bit 17.00 version 10.0.1.38, update to a version that addresses the Insecure Library Loading issue. For Quick Heal Internet Security 64 bit 17.00 version 10.0.0.37, update to a version that addresses the Insecure Library Loading issue. For Quick Heal Internet Security 32 bit 17.00 version 10.0.0.37, update to a version that addresses the Insecure Library Loading issue. For Quick Heal AntiVirus Pro 64 bit 17.00 version 10.0.0.37, update to a version that addresses the Insecure Library Loading issue. For Quick Heal AntiVirus Pro 32 bit 17.00 version 10.0.0.37, update to a version that addresses the Insecure Library Loading issue. As a temporary workaround, consider restricting the loading of libraries to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾