Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Quick Heal security suites include files missing basic memory protections

CVE-2017-8776 · published 9 years ago
Summary

The listed Quick Heal products install about 165 program files that lack modern memory‑safety features. This makes it easier for attackers to target the software with crafted code. Update the software to the latest version or apply any available patches from Quick Heal to ensure those protections are enabled.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
quickheal antivirus_pro <= 10.1.0.316
cpe:2.3:a:quickheal:antivirus_pro:*:*:*:*:*:*:*:*
quickheal internet_security <= 10.1.0.316
cpe:2.3:a:quickheal:internet_security:*:*:*:*:*:*:*:*
quickheal total_security <= 10.1.0.316
cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*
Original advisory text
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use AS...
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the product.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published4 May 2017
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-8776 · NVD
Track software like this
Free during beta