CVE-2010-1676

Name of the Vulnerable Software and Affected Versions Tor versions 0.2.1.x through 0.2.1.27 Tor versions 0.2.2.x through 0.2.2.19-alpha

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, or possibly execute arbitrary code of their choice. This is due to a heap-based buffer overflow.

Recommendations For Tor versions 0.2.1.x through 0.2.1.27, update to version 0.2.1.28 or later. For Tor versions 0.2.2.x through 0.2.2.19-alpha, update to version 0.2.2.20-alpha or later.