CVE-2010-3129

uTorrent <2.0.3 - RCE

Title source: llm

Description

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.

Exploits (2)

exploitdb WORKING POC VERIFIED
by TheLeader · clocalwindows
https://www.exploit-db.com/exploits/14726
exploitdb WORKING POC VERIFIED
by Dr_IDE · textlocalwindows
https://www.exploit-db.com/exploits/14748

Scores

EPSS 0.0178
EPSS Percentile 82.4%

Classification

Status draft

Affected Products (26)

utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
utorrent/utorrent
... and 11 more

Timeline

Published Aug 26, 2010
Tracked Since Feb 18, 2026