CVE-2018-8090 Other in n/a
Quick Heal antivirus products allow DLL hijacking via insecure library loading, enabling attackers to execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-8090?
CVE-2018-8090 is a high-severity vulnerability in n/a, published on 25 Jul 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Quick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 (QHTS32.exe), (QHTSFT32.exe) - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 (QHIS64.exe), (QHISFT64.exe) - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17.00 (QHIS32.exe), (QHISFT32.exe) - Version 10.0.0.37; Quick Heal AntiVirus Pro 64 bit 17.00 (QHAV64.exe), (QHAVFT64.exe) - Version 10.0.0.37; and Quick Heal AntiVirus Pro 32 bit 17.00 (QHAV32.exe), (QHAVFT32.exe) - Version 10.0.0.37 allow DLL Hijacking because of Insecure Library Loading.
Weakness: CWE-427
Which versions are affected by CVE-2018-8090?
It affects 3 products.
Products include Quickheal Antivirus Pro, Quickheal Internet Security, Quickheal Total Security.
How do I fix CVE-2018-8090?
No fix has been published for CVE-2018-8090 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-8090 being exploited?
There is no known exploitation of CVE-2018-8090 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qf8v-cvhw-6694.