CVE-2017-8773
CRITICALQuick Heal AntiVirus Pro, Internet Security, and Total Security < 10.1.0.316 - Out-of-bounds Write
Title source: llmDescription
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADER_V1_PACKED. This vulnerability can be exploited to gain Remote Code Execution as well as Privilege Escalation.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
http://payatu.com/oob-write-heap-buffer-dwcompressionsize-ms-wim/
Scores
CVSS v3
9.8
EPSS
0.0232
EPSS Percentile
81.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (3)
quickheal/antivirus_pro
< 10.1.0.316
quickheal/internet_security
< 10.1.0.316
quickheal/total_security
< 10.1.0.316
Published
May 04, 2017
Tracked Since
Feb 18, 2026