Vulnerability Description
The mintToken function of a smart contract implementation for FILM, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Film Tokens By Contrib Project | Film Tokens By Contrib | - |
Related Weaknesses (CWE)
References
- https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20iThird Party Advisory
- https://github.com/BlockChainsSecurity/EtherTokens/tree/master/FILMThird Party Advisory
- https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20iThird Party Advisory
- https://github.com/BlockChainsSecurity/EtherTokens/tree/master/FILMThird Party Advisory
FAQ
What is CVE-2018-13490?
CVE-2018-13490 is a vulnerability with a CVSS score of 7.5 (HIGH). The mintToken function of a smart contract implementation for FILM, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any valu...
How severe is CVE-2018-13490?
CVE-2018-13490 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-13490?
Check the references section above for vendor advisories and patch information. Affected products include: Film Tokens By Contrib Project Film Tokens By Contrib.