NetSight
IP …
critical9.3Public exploit code

CVE-2009-1759

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorre…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

Affected products

VendorProductAffected versions
RahulDtorrent
Versions 3.2.0, 3.3.0, 3.3.1, 3.3.2
RahulCtorrent
Version 1.3.4

Weakness classification

CWE-119

References