CVE-2008-7166

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.

Link	Resource
http://secunia.com/advisories/28686	Vendor Advisory
http://www.vupen.com/english/advisories/2008/0326	Vendor Advisory
http://www.vupen.com/english/advisories/2008/0327	Vendor Advisory
http://secunia.com/advisories/28695	Vendor Advisory
http://aluigi.altervista.org/adv/ruttorrent2-adv.txt
http://osvdb.org/42826
http://osvdb.org/42825

Configuration 1

cpe:2.3:a:bittorrent:bittorrent:4.0.4:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.4:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.27.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.3.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.26.0:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.4:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.2.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.8:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.7:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.0:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.7.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.0.1:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.2.2:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.6:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.4:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.3.0:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:6.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.4:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.7.4:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.2:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.3.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.3.4:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:*:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.7.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.0.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.6:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.22.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.2.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.6:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.6:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.7:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.9:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:3.9.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.2:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.1.6:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.4:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.5:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.1.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.4.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.7:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.22.4:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.0.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.22.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.1:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.7.5:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.24.0:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.3.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.24.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.5:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.7:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.5:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.3.5:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.9:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.1.7:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.27.1:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.7:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.8:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.1.4:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.9.5:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.1.8:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.3.6:*:*:*:*:*:*:* cpe:2.3:a:utorrent:utorrent:1.7.1:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.6:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.20.8:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.0.3:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.9:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:5.0.2:*:*:*:*:*:*:* cpe:2.3:a:bittorrent:bittorrent:4.4.0:*:*:*:*:*:*:*

---

Published : 2009-09-04 10:30

Updated : 2009-09-09 04:00

---

NVD link : CVE-2008-7166

Mitre link : CVE-2008-7166

Bittorrent

Utorrent

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer