CVE-2010-3129
uTorrent <2.0.3 - RCE
Title source: llmDescription
Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Dr_IDE · textlocalwindows
https://www.exploit-db.com/exploits/14748
exploitdb
WORKING POC
VERIFIED
by TheLeader · clocalwindows
https://www.exploit-db.com/exploits/14726
References (5)
Scores
EPSS
0.0178
EPSS Percentile
82.8%
Details
Status
published
Products (25)
utorrent/utorrent
1.1.1
utorrent/utorrent
1.1.3
utorrent/utorrent
1.1.4
utorrent/utorrent
1.1.5
utorrent/utorrent
1.1.6
utorrent/utorrent
1.1.7
utorrent/utorrent
1.2
utorrent/utorrent
1.2.1
utorrent/utorrent
1.2.2
utorrent/utorrent
1.7
... and 15 more
Published
Aug 26, 2010
Tracked Since
Feb 18, 2026