PT-2026-44861 · Undefined · Undefined

Published 2026-05-29 · Updated 2026-05-29 · CVE-2018-25383

NVD

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2018-25383

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25383 · Security Note
• http://commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper · Note
• https://exploit-db.com/exploits/45565 · Note
• https://vulncheck.com/advisories/free-mp3-cd-ripper-buffer-overflow-seh-dep-bypass · Note