PT-2013-1374
CVE-2009-5134
·
تاريخ النشر
2013-01-18
·
تاريخ التحديث
2017-09-19
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
uTorrent versions prior to 1.8.3 (Build 16010)
Description
A buffer overflow issue exists in the "create torrent dialog" functionality, allowing user-assisted remote attackers to cause a denial of service, potentially leading to application crashes, and possibly execute arbitrary code via a text file containing a large string.
Recommendations
For versions prior to 1.8.3 (Build 16010), update to version 1.8.3 (Build 16010) or later to resolve the issue. As a temporary workaround, consider avoiding the use of the "create torrent dialog" functionality with untrusted text files until a patch is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾