CVE:CVE-2017-8775
CNNVD:CNNVD-201705-263
Quick Heal Internet Security、Quick Heal Total Security和Quick Heal AntiVirus Pro都是印度Quick Heal公司的杀毒软件。
多款Quick Heal产品中存在内存损坏漏洞。攻击者可借助畸形的Mach-O文件利用该漏洞造成内存损坏。以下产品和版本受到影响：Quick Heal Internet Security 10.1.0.316版本；Quick Heal Total Security 10.1.0.316版本；Quick Heal AntiVirus Pro 10.1.0.316版本。
solution:Upgrade quickheal antivirus_pro to a higher version than 10.1.0.316,and avoid the version (,10.1.0.316]; Upgrade quickheal internet_security to a higher version than 10.1.0.316,and avoid the version (,10.1.0.316]; Upgrade quickheal total_security to a higher version than 10.1.0.316,and avoid the version (,10.1.0.316]