Ikarussecurity Ikarus Antivirus vulnerabilities

CVE-2017-15643 [HIGH] CWE-444 CVE-2017-15643: An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS An An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client to initiate an update transaction by modifying an updat