CVE-2010-3129

uTorrent <2.0.3 - RCE

Title source: llm

Description

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Dr_IDE · textlocalwindows
https://www.exploit-db.com/exploits/14748
exploitdb WORKING POC VERIFIED
by TheLeader · clocalwindows
https://www.exploit-db.com/exploits/14726

Scores

EPSS 0.0178
EPSS Percentile 82.8%

Details

Status published
Products (25)
utorrent/utorrent 1.1.1
utorrent/utorrent 1.1.3
utorrent/utorrent 1.1.4
utorrent/utorrent 1.1.5
utorrent/utorrent 1.1.6
utorrent/utorrent 1.1.7
utorrent/utorrent 1.2
utorrent/utorrent 1.2.1
utorrent/utorrent 1.2.2
utorrent/utorrent 1.7
... and 15 more
Published Aug 26, 2010
Tracked Since Feb 18, 2026