medium5.0
CVE-2008-7166
Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to caus…
Impact
Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bittorrent | Bittorrent | through 6.0.1 Versions 3.9.1, 4.0.0, 4.0.1, 4.0.2, 4.0.3 |
| Utorrent | Utorrent | through 1.7.6 Versions 1.1.1, 1.1.3, 1.1.4, 1.1.5, 1.1.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/ruttorrent2-adv.txt
- http://osvdb.org/42825
- http://osvdb.org/42826
- http://secunia.com/advisories/28686
- http://secunia.com/advisories/28695
- http://www.vupen.com/english/advisories/2008/0326
- http://www.vupen.com/english/advisories/2008/0327
- http://aluigi.altervista.org/adv/ruttorrent2-adv.txt
- http://osvdb.org/42825
- http://osvdb.org/42826
- http://secunia.com/advisories/28686
- http://secunia.com/advisories/28695
- http://www.vupen.com/english/advisories/2008/0326
- http://www.vupen.com/english/advisories/2008/0327