PT-2019-9530 · Unknown · Cryptobotsbattle

Publicado 2019-03-15 · Atualizado 2019-03-18 · CVE-2018-17882

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CryptoBotsBattle (CBTB) (affected versions not specified)

Description An integer overflow issue exists in the batchTransfer function of a smart contract implementation. This could allow an attacker to create an arbitrary amount of tokens for any user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2018-17882

Produtos afetados

Cryptobotsbattle

Referências · 3

• 🔥 https://github.com/GreenFoxy/Smart-contract-Vulnerabilities/blob/master/BattleToken.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17882 · Nota de Segurança
• https://etherscan.io/address/0x4daa9dc438a77bd59e8a43c6d46cbfe84cd04255#code · Nota