CVE-2018-25383

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling execution of arbitrary code through ROP chain gadgets and shellcode injection.

Score

CVSS 4.0 8.6 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-05-29

Last modified

2026-05-29

Weaknesses

CWE-121

Affected products

• Free Mp3 Cd Ripper (Commentcamarche)

References

• http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper
• https://www.exploit-db.com/exploits/45565
• https://www.vulncheck.com/advisories/free-mp3-cd-ripper-buffer-overflow-seh-dep-bypass