Vulnerability Description
Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper
- https://www.exploit-db.com/exploits/45565
- https://www.vulncheck.com/advisories/free-mp3-cd-ripper-buffer-overflow-seh-dep-
FAQ
What is CVE-2018-25383?
CVE-2018-25383 is a vulnerability with a CVSS score of 8.4 (HIGH). Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. ...
How severe is CVE-2018-25383?
CVE-2018-25383 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25383?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.