Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via stru…

CVE-2018-25383 affects Free MP3 CD Ripper 2.8, containing a stack-based buffer overflow vulnerability in WMA file processing. Local attackers can exploit this by crafting malicious WMA files that trigger the overflow when loaded through the Convert function. The vulnerability allows bypassing DEP protection through structured exception handling manipulation. Successful exploitation enables arbitrary code execution via ROP chain gadgets and shellcode injection. This represents a significant security risk for users of the affected software version.