QuickHeal AntiVirus 'pepoly.dll' Module Local Stack Buffer Overflow Vulnerability

Bugtraq ID:	64402
Class:	Boundary Condition Error
CVE:	CVE-2013-6767
Remote:	No
Local:	Yes
Published:	Dec 18 2013 12:00AM
Updated:	Dec 18 2013 12:00AM
Credit:	Arash Allebrahim
Vulnerable:
Not Vulnerable:

QuickHeal AntiVirus 'pepoly.dll' Module Local Stack Buffer Overflow Vulnerability

QuickHeal AntiVirus is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Local attackers can exploit this issue to run arbitrary code with elevated privileges. Failed exploit attempts can result in a denial-of-service condition.

QuickHeal AntiVirus 7.0.0.1 is vulnerable; other versions may also be affected.

QuickHeal AntiVirus 'pepoly.dll' Module Local Stack Buffer Overflow Vulnerability

The following example exploit is available:

• /data/vulnerabilities/exploits/64402.c

QuickHeal AntiVirus 'pepoly.dll' Module Local Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

QuickHeal AntiVirus 'pepoly.dll' Module Local Stack Buffer Overflow Vulnerability

References:

• Quick Heal Homepage (Quick Heal)