CVE-2017-8773 : Security Advisory and Response

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to an Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize in the Microsoft WIM Header WIMHEADER_V1_PACKED, potentially leading to Remote Code Execution and Privilege Escalation.

Understanding CVE-2017-8773

This CVE involves a security vulnerability in Quick Heal security products that can be exploited by attackers for remote code execution and privilege escalation.

What is CVE-2017-8773?

The vulnerability in Quick Heal security products allows attackers to perform an Out of Bounds Write on a Heap Buffer by exploiting the improper validation of dwCompressionSize in the Microsoft WIM Header WIMHEADER_V1_PACKED.

The Impact of CVE-2017-8773

The security flaw could result in Remote Code Execution and Privilege Escalation, posing significant risks to affected systems and user data.

Technical Details of CVE-2017-8773

Quick Heal security products are susceptible to exploitation due to inadequate validation mechanisms.

Vulnerability Description

The vulnerability arises from the lack of proper validation of the dwCompressionSize value in the Microsoft WIM Header WIMHEADER_V1_PACKED, enabling attackers to perform an Out of Bounds Write on a Heap Buffer.

Affected Systems and Versions

Quick Heal Internet Security 10.1.0.316
Quick Heal Total Security 10.1.0.316
Quick Heal AntiVirus Pro 10.1.0.316

Exploitation Mechanism

Attackers can exploit this vulnerability to execute remote code and escalate privileges on the affected systems.

Mitigation and Prevention

It is crucial to take immediate steps to address and prevent the exploitation of CVE-2017-8773.

Immediate Steps to Take

Update Quick Heal security products to the latest patched versions.
Implement network security measures to detect and block potential attacks.

Long-Term Security Practices

Regularly update and patch all software and security applications.
Conduct security audits and assessments to identify vulnerabilities proactively.

Patching and Updates

Stay informed about security updates and patches released by Quick Heal.
Apply patches promptly to ensure protection against known vulnerabilities.