CVE-2017-8773 - CVE House
Back to Database
Status published Critical CVE-2017-8773

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316,...

Vulnerability Description

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADER_V1_PACKED. This vulnerability can be exploited to gain Remote Code Execution as well as Privilege Escalation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-8773

Credits & Attribution

No credits recorded in the NVD database.

References

More from quickheal

View All →
CVE-2022-31467
DLL Hijacking Vulnerability in Quick Heal Total Security
High 7.9
CVE-2022-31466
TOCTOU Vulnerability in Quick Heal Total Security
High 7.9
CVE-2020-9362
The Quick Heal AV parsing engine (November 2019) allows virus-detection...
High 7.8
CVE-2020-27587
Quick Heal Total Security before 19.0 allows attackers with local...
Medium 6.7
CVE-2020-27586
Quick Heal Total Security before version 19.0 transmits quarantine and...
Medium 5.9

Affected Vendor

Affected Software

antivirus pro, internet security, total security
Vulnerable Versions:
0

Timeline

Official Publish: May 4th, 2017
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.