Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2018-25383

Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass

Description

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Commentcamarche Free MP3 CD Ripper

  • 2.8affected

References