CVE-2018-13488
Summary
| CVE | CVE-2018-13488 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-07-09 06:29:00 UTC |
| Updated | 2018-08-28 17:23:00 UTC |
| Description | The mintToken function of a smart contract implementation for Crypto Alley Shares (CAST), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. |
Risk And Classification
Problem Types: CWE-190
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Crypto Alley Shares Project | Crypto Alley Shares | - | All | All | All |
| Application | Crypto Alley Shares Project | Crypto Alley Shares | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| EtherTokens/mint integer overflow.md at master · BlockChainsSecurity/EtherTokens · GitHub | MISC | github.com | Third Party Advisory |
| EtherTokens/CAST at master · BlockChainsSecurity/EtherTokens · GitHub | MISC | github.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.