CVE:CVE-2017-5005
CNNVD:CNNVD-201701-004
Quick Heal Internet Security、Total Security和AntiVirus Pro on OS X都是基于OS X平台的杀毒软件。
基于OS X平台的Quick Heal Internet Security 10.1.0.316及之前的版本、Total Security 10.1.0.316及之前的版本和AntiVirus Pro 10.1.0.316及之前的版本中存在基于栈的缓冲区溢出漏洞。远程攻击者可借助Mach-O文件中特制的LC_UNIXTHREAD.cmdsize字段利用该漏洞执行任意代码。
solution:Upgrade quickheal antivirus_pro to a higher version than 10.1.0.316,and avoid the version (,10.1.0.316]; Upgrade quickheal internet_security to a higher version than 10.1.0.316,and avoid the version (,10.1.0.316]; Upgrade quickheal total_security to a higher version than 10.1.0.316,and avoid the version (,10.1.0.316]