PT-2026-44861 · Undefined · Undefined

CVE-2018-25383 · Publicado 2026-05-29 · Atualizado 2026-05-29

NVD

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.

Correção

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

CVE-2018-25383

Produtos afetados

Undefined

Referências · 4

• https://vulncheck.com/advisories/free-mp3-cd-ripper-buffer-overflow-seh-dep-bypass · Nota
• http://commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-25383 · Nota de Segurança
• https://exploit-db.com/exploits/45565 · Nota