CVE-2018-25383
HIGH SEVERITYCVSS Score & Metrics
Base Score
8.4 / 10
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Description
Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-121
Source
NVD
Vendor
Commentcamarche
Product
Free MP3 CD Ripper
Discussion (0)
Add Comment
No comments yet. Be the first!