Description

A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.

Related CPE's

a

bittorrent

utorrent

-

Vulnerable

References

https://bugs.chromium.org/p/project-zero/issues/detail?id=1524

ExploitIssue TrackingMailing ListThird Party Advisory

https://vuldb.com/?id.113805

ExploitThird Party AdvisoryVDB Entry

https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/

Not Applicable

Weaknesses

[email protected]

Primary
CWE-787

[email protected]

Secondary
CWE-119

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-06-17T13:15:11.333

3 years ago

Last modified

2022-06-29T13:48:45.483

3 years ago