Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted .ncm file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ncmdump 安全漏洞
Vulnerability Description
ncmdump是中国TaurusXin个人开发者的一个可将下载的网易云音乐缓存文件（ncm）转换为 mp3 或 flac 格式的软件。 ncmdump v1.3.2版本存在安全漏洞，该漏洞源于/src/ncmcrypt.cpp 中的 NeteaseCrypt FixMetadata 函数包含分段违规，允许攻击者通过精心设计的 .ncm 文件造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A