CVE-2009-1759

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

13.65% chance of exploitation in the next 30 days, 96th percentile

Published

2009-05-22

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8470

Security advisories

• http://secunia.com/advisories/34752
• http://www.vupen.com/english/advisories/2009/1092
• http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=…
• http://www.openwall.com/lists/oss-security/2009/05/20/3
• http://www.securityfocus.com/bid/34584

References

• CVE Record
• NVD entry