CVE-2017-9977

CVE-2017-9977 describes a high-severity vulnerability in AVG AntiVirus for MacOS (scan engine before 4668) that allows remote attackers to bypass malware detection. This is due to the antivirus failing to scan inside disk image (DMG) files, enabling malicious content to remain undetected. The vulnerability has a CVSS score of 7.5, indicating a high impact on integrity with no confidentiality or availability impact, and can be exploited remotely with low complexity and no user interaction. While no public exploits, Metasploit modules, or Nuclei templates are available, and there is no evidence of active exploitation, its potential to bypass security controls makes it a notable concern.