Vulnerability Details : CVE-2017-8776
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the product.
Products affected by CVE-2017-8776
- cpe:2.3:a:quickheal:antivirus_pro:*:*:*:*:*:*:*:*
- cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*
- cpe:2.3:a:quickheal:internet_security:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-8776
0.24%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 44 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-8776
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST | |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
NIST |
References for CVE-2017-8776
-
http://payatu.com/quick-heal-antivirus-protection-mechanism-failure-vulnerability/
Non-ASLR & DEP Modules - payatuThird Party Advisory
Jump to