PT-2009-4229
CVE-2009-1759
·
تاريخ النشر
2009-05-22
·
تاريخ التحديث
2017-09-29
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Enhanced CTorrent versions 3.3.2 and earlier
CTorrent version 1.3.4
Description:
The issue is related to a stack-based buffer overflow in the
btFiles::BuildFromMI function, which can be triggered by a Torrent file containing a long path. This can cause a denial of service (crash) and potentially allow remote attackers to execute arbitrary code.Recommendations:
For Enhanced CTorrent versions 3.3.2 and earlier, consider updating to a newer version that addresses this issue.
For CTorrent version 1.3.4, consider updating to a newer version that addresses this issue.
As a temporary workaround, consider restricting the handling of Torrent files with long paths to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾