Description
Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.
References (7)
Core 7
Core References
Third Party Advisory x_refsource_misc
http://aluigi.altervista.org/adv/ruttorrent2-adv.txt
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28695
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/42826
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0327
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/42825
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28686
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0326
Scores
EPSS
0.0285
EPSS Percentile
85.1%
Details
CWE
CWE-119
Status
published
Products (50)
bittorrent/bittorrent
3.9.1
bittorrent/bittorrent
4.0.0
bittorrent/bittorrent
4.0.1
bittorrent/bittorrent
4.0.2
bittorrent/bittorrent
4.0.3
bittorrent/bittorrent
4.0.4
bittorrent/bittorrent
4.1.0
bittorrent/bittorrent
4.1.1
bittorrent/bittorrent
4.1.2
bittorrent/bittorrent
4.1.3
... and 40 more
Published
Sep 04, 2009
Tracked Since
Feb 18, 2026