[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft1Kfa9ChEyb_htEOJfW6IVPwNTKH-fjD7KOR3GSu97s":3,"g5a-risk:CVE-2018-3971":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":26,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":59,"references":60,"referencesCount":73,"weaknesses":74,"weaknessesCount":59,"isActivelyExploited":83,"cisaInfo":26,"otxData":26,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":118,"notableEvents":119},"CVE-2018-3971","What is CVE-2018-3971?","An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP request to trigger this vulnerability.","An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP ...","2018-10-25T18:29:00.427","2023-02-02T13:43:23.64",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":41,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":39,"ImpactScore":40},"talos-cna@cisco.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":36,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":38,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",9.3,"CRITICAL",2.5,6,[42],{"Source":17,"Type":18,"CVSSData":43,"BaseSeverity":25,"ExploitabilityScore":48,"ImpactScore":49,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":44,"VectorString":45,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":46,"IntegrityImpact":46,"AvailabilityImpact":46,"BaseScore":47,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",7.2,3.9,10,0.00541,[50,50,50,50,50,50,50],"High",[54],{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"sophos","hitmanpro.alert","3.7.6.744","cpe:2.3:a:sophos:hitmanpro.alert:3.7.6.744:*:*:*:*:*:*:*",1,[61,68],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105743","Securityfocus",[65,66,67],"Broken Link","Third Party Advisory","VDB Entry",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.talosintelligence.com\u002Fvulnerability_reports\u002FTALOS-2018-0636","Talosintelligence",[72,66],"Exploit",2,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-123","Write-what-where Condition","Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.","","Draft","Base","Simple",false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2018-3971? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-3971, a high severity cyber security vulnerability from 2018. An exploitable arbitrary write vulnerability exists in the 0...","CVE-2018-3971, CVE-2018-3971 vulnerability, CVE-2018-3971 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, sophos security, hitmanpro.alert vulnerability","\u002Fwhat-is\u002Fcve-2018-3971",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-3971","Cybersecurity","CVE-2018-3971, CVE-2018-3971 vulnerability, CVE-2018-3971 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":26,"Negate":26,"Nodes":112},[113],{"Operator":114,"Negate":26,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E84ED4F7-9CBE-4E15-B862-7E64A2F6922D",[],[],{"lastModified":11,"cacheTime":121,"version":44},1792347219208,{"score":123,"band":124,"action":125,"scoredAt":126},46,"Medium","Plan remediation","2026-10-16T06:45:04.945835+00:00"]