CVE-2018-4012

Name of the Vulnerable Software and Affected Versions Webroot BrightCloud SDK (affected versions not specified)

Description A buffer overflow issue exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The bc http read header function incorrectly handles overlong headers, which can lead to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud server to trigger this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.