CVE-2018-25383

HIGH EPSS 7.9%
Published May 29, 20261mo ago · Modified Jun 17, 20261w ago
8.6 CVSS 4.0
High
Find Similar
Published May 29, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.

CVSS Details

Base Score
8.6
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
7.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-121

References 3

  • commentcamarche.net http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper
  • exploit-db.com https://www.exploit-db.com/exploits/45565
  • vulncheck.com https://www.vulncheck.com/advisories/free-mp3-cd-ripper-buffer-overflow-seh-dep-bypass

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.