EUVD-2018-5410

Malware in sbrugna...

CVE-2018-13472

The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13472

The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13472

The CVE-2018-13472 entry concerns the CloutToken Ethereum smart contract. A vulnerability in the mint function enables an overflow that lets the contract owner set any user’s balance to an arbitrary value. Root cause: integer overflow in the mint path. Impact (as stated): owner-controlled balance...