CVE-2017-8773
CriticalSummary
Quick Heal Internet Security, Total Security, and AntiVirus Pro version 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of WIM Header. This vulnerability can be exploited for Remote Code Execution and Privilege Escalation.
Risk Assessment
The organization may be exposed to remote code execution and unauthorized access to systems, potentially leading to serious security consequences.
Recommendation
It is recommended to update Quick Heal software to the latest version to mitigate this vulnerability and conduct a security audit of the systems.
Original NVD description (English source)
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADER_V1_PACKED. This vulnerability can be exploited to gain Remote Code Execution as well as Privilege Escalation.