CVE-2008-7166 Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption...
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bittorrent | <= 6.0.1 | No fix listed |
| bittorrent | = 3.9.1 | No fix listed |
| bittorrent | = 4.0.0 | No fix listed |
| bittorrent | = 4.0.1 | No fix listed |
| bittorrent | = 4.0.2 | No fix listed |
| bittorrent | = 4.0.3 | No fix listed |
| bittorrent | = 4.0.4 | No fix listed |
| bittorrent | = 4.1.0 | No fix listed |
| bittorrent | = 4.1.1 | No fix listed |
| bittorrent | = 4.1.2 | No fix listed |
| bittorrent | = 4.1.3 | No fix listed |
| bittorrent | = 4.1.4 | No fix listed |
| bittorrent | = 4.1.5 | No fix listed |
| bittorrent | = 4.1.6 | No fix listed |
| bittorrent | = 4.1.7 | No fix listed |
| bittorrent | = 4.1.8 | No fix listed |
| bittorrent | = 4.2.0 | No fix listed |
| bittorrent | = 4.2.1 | No fix listed |
| bittorrent | = 4.2.2 | No fix listed |
| bittorrent | = 4.3.0 | No fix listed |
| bittorrent | = 4.3.1 | No fix listed |
| bittorrent | = 4.3.2 | No fix listed |
| bittorrent | = 4.3.3 | No fix listed |
| bittorrent | = 4.3.4 | No fix listed |
| bittorrent | = 4.3.5 | No fix listed |
Show 61 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bittorrent | = 4.3.6 | No fix listed |
| bittorrent | = 4.4.0 | No fix listed |
| bittorrent | = 4.4.1 | No fix listed |
| bittorrent | = 4.9.2 | No fix listed |
| bittorrent | = 4.9.3 | No fix listed |
| bittorrent | = 4.9.4 | No fix listed |
| bittorrent | = 4.9.5 | No fix listed |
| bittorrent | = 4.9.6 | No fix listed |
| bittorrent | = 4.9.7 | No fix listed |
| bittorrent | = 4.9.8 | No fix listed |
| bittorrent | = 4.9.9 | No fix listed |
| bittorrent | = 4.20.0 | No fix listed |
| bittorrent | = 4.20.1 | No fix listed |
| bittorrent | = 4.20.2 | No fix listed |
| bittorrent | = 4.20.3 | No fix listed |
| bittorrent | = 4.20.4 | No fix listed |
| bittorrent | = 4.20.6 | No fix listed |
| bittorrent | = 4.20.7 | No fix listed |
| bittorrent | = 4.20.8 | No fix listed |
| bittorrent | = 4.20.9 | No fix listed |
| bittorrent | = 4.22.0 | No fix listed |
| bittorrent | = 4.22.1 | No fix listed |
| bittorrent | = 4.22.4 | No fix listed |
| bittorrent | = 4.24.0 | No fix listed |
| bittorrent | = 4.24.2 | No fix listed |
| bittorrent | = 4.26.0 | No fix listed |
| bittorrent | = 4.27.1 | No fix listed |
| bittorrent | = 4.27.2 | No fix listed |
| bittorrent | = 5.0.0 | No fix listed |
| bittorrent | = 5.0.1 | No fix listed |
| bittorrent | = 5.0.2 | No fix listed |
| bittorrent | = 5.0.3 | No fix listed |
| bittorrent | = 5.0.4 | No fix listed |
| bittorrent | = 5.0.5 | No fix listed |
| bittorrent | = 5.0.6 | No fix listed |
| bittorrent | = 5.0.7 | No fix listed |
| bittorrent | = 5.0.8 | No fix listed |
| bittorrent | = 5.0.9 | No fix listed |
| bittorrent | = 5.2.0 | No fix listed |
| bittorrent | = 6.0 | No fix listed |
| utorrent | <= 1.7.6 | No fix listed |
| utorrent | = 1.1.1 | No fix listed |
| utorrent | = 1.1.3 | No fix listed |
| utorrent | = 1.1.4 | No fix listed |
| utorrent | = 1.1.5 | No fix listed |
| utorrent | = 1.1.6 | No fix listed |
| utorrent | = 1.1.7 | No fix listed |
| utorrent | = 1.2 | No fix listed |
| utorrent | = 1.2.1 | No fix listed |
| utorrent | = 1.2.2 | No fix listed |
| utorrent | = 1.3 | No fix listed |
| utorrent | = 1.4 | No fix listed |
| utorrent | = 1.4.2 | No fix listed |
| utorrent | = 1.5 | No fix listed |
| utorrent | = 1.6 | No fix listed |
| utorrent | = 1.7 | No fix listed |
| utorrent | = 1.7.1 | No fix listed |
| utorrent | = 1.7.2 | No fix listed |
| utorrent | = 1.7.3 | No fix listed |
| utorrent | = 1.7.4 | No fix listed |
| utorrent | = 1.7.5 | No fix listed |
References
- aluigi.altervista.org
- 42825 vdb-entry
- 42826 vdb-entry
- 28686 third-party-advisory vendor-advisory
- 28695 third-party-advisory vendor-advisory
- ADV-2008-0326 vdb-entry vendor-advisory
- ADV-2008-0327 vdb-entry vendor-advisory