RSS   Vulnerabilities for 'Brightcloud'   RSS

2019-01-03
 
CVE-2018-4012

CWE-119
 

 
An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud server to trigger this vulnerability.

 
2018-12-18
 
CVE-2018-4015

CWE-295
 

 
An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration of the HTTP client does not enforce a secure connection by default, resulting in a failure to validate TLS certificates. An attacker could impersonate a remote BrightCloud server to exploit this vulnerability.

 

 >>> Vendor: Webroot 6 Products
Internet security essentials
Security - free
Security - complete
Brightcloud
Endpoint agents
Secureanywhere


Copyright 2024, cxsecurity.com

 

Back to Top