Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

CVE-2021-33974

EPSS 0.85% · P75
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-33974

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/) is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: This is a set of vulnerabilities affecting popular software, and the installation packages correspond to versions "360 Safeguard(12.1.0.1004,12.1.0.1005,13.1.0.1001)" , "360 Total Security(10.8.0.1060,10.8.0.1213)", "360 Safe Browser & 360 Chrome(12. The attack vector is: On the browser vulnerability, just open a link to complete the vulnerability exploitation remotely; on the client software, you need to locally execute the vulnerability exploitation program, which of course can be achieved with the full chain of browser vulnerability. ¶¶ This is a set of the most serious vulnerabilities that exist on Qihoo 360's PC client multiple popular software, remote vulnerabilities can be accomplished by opening a link to arbitrary code execution on both security browsers, in conjunction with the exploitation of local vulnerabilities that allow spyware to persist without being scanned to permanently reside on the target PC computer (because local vulnerabilities target Qihoo 360 company's antivirus software kernel flaws); this set of remote and local vulnerabilities in perfect coordination, to achieve an information security fallacy, on Qihoo 360's antivirus software vulnerability, not only can not be scanned out of the virus, but will help the virus persistently control the target computer, while Qihoo 360 claims to be a secure browser, which exists in the kernel vulnerability but help the composition of the remote vulnerability.(Security expert "Memory Corruptor" have reported this set of vulnerabilities to the corresponding vendor, all vulnerabilities have been fixed and the vendor rewarded thousands of dollars to this security expert)
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
360 Safe guard 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
360 Safe guard是中国北京奇虎科技有限公司(360)公司的一个计算机安全辅助软件。 360 Safe guard存在安全漏洞,该漏洞源于存在缓冲区溢出问题,导致攻击者可以执行任意代码。受影响的产品和版本: 360 Safe guard 12.1.0.1004版本,12.1.0.1005版本,13.1.0.1001版本。360 Total Security 10.8.0.1060版本,10.8.0.1213版本。360 Safe Browser & 360 Chrome 12版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-33974

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-33974

登录查看更多情报信息。

Other References for CVE-2021-33974 (2)

Same Patch Batch · n/a · 2023-04-19 · 67 CVEs total

CVE-2021-0875Google Android 输入验证错误漏洞
CVE-2023-28122UI Desktop 安全漏洞
CVE-2023-23451多款SICK产品访问控制错误漏洞
CVE-2023-22894Strapi 安全漏洞
CVE-2023-29923PowerJob 安全漏洞
CVE-2023-29586Code Sector TeraCopy 安全漏洞
CVE-2023-29922PowerJob 安全漏洞
CVE-2021-0872Google Android 输入验证错误漏洞
CVE-2021-0873Google Android 输入验证错误漏洞
CVE-2021-0874Google Android 输入验证错误漏洞
CVE-2023-27777Sourcecodester Online Jewelry Shop 跨站脚本漏洞
CVE-2021-0876Google Android 输入验证错误漏洞
CVE-2021-0878Google Android 输入验证错误漏洞
CVE-2021-0879Google Android 输入验证错误漏洞
CVE-2021-0880Google Android 输入验证错误漏洞
CVE-2021-0881Google Android 输入验证错误漏洞
CVE-2021-0882Google Android 输入验证错误漏洞
CVE-2021-0883Google Android 输入验证错误漏洞
CVE-2021-0884Google Android 输入验证错误漏洞
CVE-2021-0885Google Android 输入验证错误漏洞

Showing top 20 of 67 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-33974

No comments yet


Leave a comment