Skip to content

CVE-2010-3129 Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plug...

HighCVSS 9.3 EPSS 7.3% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.

Affected products

ProductAffected versionsFixed in
utorrent = 1.1.1 No fix listed
utorrent = 1.1.3 No fix listed
utorrent = 1.1.4 No fix listed
utorrent = 1.1.5 No fix listed
utorrent = 1.1.6 No fix listed
utorrent = 1.1.7 No fix listed
utorrent = 1.2 No fix listed
utorrent = 1.2.1 No fix listed
utorrent = 1.2.2 No fix listed
utorrent = 1.7 No fix listed
utorrent = 1.7.1 No fix listed
utorrent = 1.7.2 No fix listed
utorrent = 1.7.4 No fix listed
utorrent = 1.7.5 No fix listed
utorrent = 1.7.6 No fix listed
utorrent = 1.8 No fix listed
utorrent = 1.8.1 No fix listed
utorrent = 1.8.1-rc1 No fix listed
utorrent = 1.8.2 No fix listed
utorrent = 1.8.3 No fix listed
utorrent = 1.8.4 No fix listed
utorrent = 1.8.5 No fix listed
utorrent = 2.0 No fix listed
utorrent = 2.0.1 No fix listed
utorrent = 2.0.2 No fix listed
Show 1 more
ProductAffected versionsFixed in
utorrent = 2.0.3 No fix listed

References