high7.5
CVE-2018-13836
An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract.
Impact
An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set any user's balance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rocket Coin Project | Rocket Coin | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
- https://github.com/VenusADLab/EtherTokens/tree/master/Rocket%20Coin%28XRC%29
- https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
- https://github.com/VenusADLab/EtherTokens/tree/master/Rocket%20Coin%28XRC%29