{"cvss":0.0,"datePublished":"2018-04-28T00:00:00Z","dateUpdated":"2018-04-28T00:00:00Z","description":"The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect, as exploited in the wild starting in December 2017, aka the \"transferFlaw\" issue.","dueDate":"","id":"CVE-2018-10468","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"useless_ethereum_token","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"uetoken useless_ethereum_token Improper Input Validation","vendor":"uetoken"}