Required CVE Record Information
Description
Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file.
References 10 Total
- securitytracker.com: 1020664 vdb-entry
- secunia.com: 31441 third-party-advisory
- http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf
- vupen.com: ADV-2008-2341 vdb-entry
- vupen.com: ADV-2008-2340 vdb-entry
- http://forum.utorrent.com/viewtopic.php?id=44003
- secunia.com: 31445 third-party-advisory
- securityfocus.com: 30653 vdb-entry
- exchange.xforce.ibmcloud.com: bittorrent-utorrent-createdby-bo(44404) vdb-entry
- seclists.org: [dailydave] 20080811 A new datapoint for 0day lifetime mailing-list
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 10 Total
- securitytracker.com: 1020664 vdb-entryx_transferred
- secunia.com: 31441 third-party-advisoryx_transferred
- http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf x_transferred
- vupen.com: ADV-2008-2341 vdb-entryx_transferred
- vupen.com: ADV-2008-2340 vdb-entryx_transferred
- http://forum.utorrent.com/viewtopic.php?id=44003 x_transferred
- secunia.com: 31445 third-party-advisoryx_transferred
- securityfocus.com: 30653 vdb-entryx_transferred
- exchange.xforce.ibmcloud.com: bittorrent-utorrent-createdby-bo(44404) vdb-entryx_transferred
- seclists.org: [dailydave] 20080811 A new datapoint for 0day lifetime mailing-listx_transferred