CVE-2017-15643

CVE-2017-15643 describes a remote code execution vulnerability in IKARUS Anti Virus 2.16.7 for Windows. An active network attacker can exploit the cleartext HTTP update mechanism, which relies on a CRC32 checksum and update value for verification, to deliver a malicious executable. By manipulating HTTP responses to force an update and then substituting a Trojan horse file with a matching CRC32, the attacker can achieve remote code execution on the affected machine. This vulnerability has a CVSS v3 score of 7.4 (High), indicating a significant impact with high confidentiality, integrity, and availability concerns. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.