NetSight
IP …
critical9.3Public exploit code

CVE-2008-4434

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a den…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file.

Affected products

VendorProductAffected versions
UtorrentUtorrent
through 1.7.7
Versions 1.1.1, 1.1.3, 1.1.4, 1.1.5, 1.1.6
BittorrentBittorrent
through 6.0.3
Versions 3.9.1, 4.0.0, 4.0.1, 4.0.2, 4.0.3

Weakness classification

CWE-119

References