NetSight
medium5.0

CVE-2008-7166

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to caus…

Impact

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.

Affected products

VendorProductAffected versions
BittorrentBittorrent
through 6.0.1
Versions 3.9.1, 4.0.0, 4.0.1, 4.0.2, 4.0.3
UtorrentUtorrent
through 1.7.6
Versions 1.1.1, 1.1.3, 1.1.4, 1.1.5, 1.1.6

Weakness classification

References