VDB

CVE-2008-4434

CVE-2008-4434 PUBLISHED CVSS 9.300000190734863 CRITICAL

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file.

EPSS 10.97% · 95.9th percentile

Risk Scores

CVSS 2.0
9.300000190734863
EPSS Score
10.97%
95.9th percentile

Affected Products

VendorProductVersions
n/an/an/a
utorrentutorrent1.1.4, 1.1.5, 1.1.6
bittorrentbittorrent4.9.2, 4.9.3, 4.2.1

Timeline

  • Oct 3, 2008 CVE Published
  • Oct 19, 2008 PoC Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 27, 2022 EPSS Score
  • Dec 19, 2022 EPSS Score
  • Feb 10, 2023 EPSS Score
  • Apr 4, 2023 EPSS Score
  • May 27, 2023 EPSS Score
  • Jul 19, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›