Lucene search

MitreCVE-2018-14005

HistoryJul 12, 2018 - 3:29 p.m.

CVE-2018-14005

2018-07-1215:29:00

CWE-190

mitre

web.nvd.nist.gov

cve-2018-14005

integer overflow

malaysia coins

xmc

ethereum

smart contract

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

47.1%

JSON

An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract. An attacker could use it to set any user’s balance.

Affected configurations

Nvd

Node

malaysiancoin_projectmalaysiancoinMatch-

VendorProductVersionCPE
malaysiancoin_projectmalaysiancoin-cpe:2.3:a:malaysiancoin_project:malaysiancoin:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
malaysiancoin_project	malaysiancoin	-	cpe:2.3:a:malaysiancoin_project:malaysiancoin:-:::::::*

References

github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md

github.com/VenusADLab/EtherTokens/tree/master/Malaysia%20coins%28Xmc%29

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

47.1%

JSON

Related for CVE-2018-14005