CVE-2017-8773
Critical
Description
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADER_V1_PACKED. This vulnerability can be exploited to gain Remote Code Execution as well as Privilege Escalation.
SeverityCritical
CVSS9.8
Exploit probability—
ProductQuickheal Antivirus Pro
PublishedMay 4, 2017
First seenMay 4, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| quickheal antivirus_pro | v ≤ 10.1.0.316 | — |
| quickheal internet_security | v ≤ 10.1.0.316 | — |
| quickheal total_security | v ≤ 10.1.0.316 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.