CVE-2018-13773

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Enterprise Token Ecosystem (ETE) (Contract Name: NetkillerToken), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-137747.5The mintToken function of a smart contract implementation for Bitstarti, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137757.5The mintToken function of a smart contract implementation for RCKT_Coin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-137767.5The mintToken function of a smart contract implementation for AppleToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-137777.5The mintToken function of a smart contract implementation for RRToken, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-137787.5The mintToken function of a smart contract implementation for CGCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137797.5The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-137807.5The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-137817.5The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-137827.5The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer oveCVE-2018-137837.5The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner CVE-2018-137849.1PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.CVE-2018-137856.5In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and
CVE-2018-13773: High severity, CVSS 7.5 | Vulnix