CVE-2018-4012

PoC —

CVSS 3.0

8.1 high

EPSS

3%p84

Published

Jan 3, 2019 (Jan 3, 2019)

Modified

Jun 17, 2026

Description

An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud server to trigger this vulnerability.

Vendors: webroot
Products: brightcloud
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.