CVE-2010-3129
uTorrent <2.0.3 - RCE
Title source: llmDescription
Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by TheLeader · clocalwindows
https://www.exploit-db.com/exploits/14726
exploitdb
WORKING POC
VERIFIED
by Dr_IDE · textlocalwindows
https://www.exploit-db.com/exploits/14748
References (5)
Scores
EPSS
0.0178
EPSS Percentile
82.4%
Classification
Status
draft
Affected Products (26)
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
... and 11 more
Timeline
Published
Aug 26, 2010
Tracked Since
Feb 18, 2026