uTorrent

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

uTorrent records in CISA KEV

No uTorrent vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Utorrent 8 records MEDIUM Web 2 records HIGH Utorrent Remote 1 record LOW Utorrent Webui 1 record LOW

Records

12 records

TI-2018-15268 CVE-2018-25041 · GHSA-mf7m-rm6j-7h8r

uTorrent JSON RPC Server privileges management

HIGH 71

A vulnerability was found in uTorrent.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0104 Published 2022-06-17 No fix listed CWE-269

TI-2018-15267 CVE-2018-25040 · GHSA-7c3v-qp4q-7jpq

uTorrent Web HTTP RPC Server privileges management

HIGH 71

A vulnerability was found in uTorrent Web.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00928 Published 2022-06-17 No fix listed CWE-269

TI-2007-00903 CVE-2007-0927 · GHSA-5h3x-cq68-whpx

Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary…

MEDIUM 62

Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.44978 Published 2007-02-14 No fix listed

TI-2008-04228 CVE-2008-4434 · GHSA-gpw2-8gvp-j3p3

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2)…

MEDIUM 53

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.10966 Published 2008-10-03 No fix listed CWE-119

TI-2010-02990 CVE-2010-3129 · GHSA-j3jm-gfxr-w77p

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and…

MEDIUM 50

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07261 Published 2010-08-26 No fix listed

TI-2015-04608 CVE-2015-5474 · GHSA-3749-7fcp-r85v

BitTorrent and uTorrent allow remote attackers to inject command line parameters and…

MEDIUM 47

BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03808 Published 2015-08-13 No fix listed CWE-77

TI-2009-04880 CVE-2009-5134 · GHSA-8r37-j9gc-53g7

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build…

MEDIUM 41

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 (Build 16010), allows user-assisted remote attackers to cause a denial of service (appl…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07707 Published 2013-01-18 No fix listed CWE-119

TI-2008-06276 CVE-2008-6586 · GHSA-fghj-4j9p-gw48

Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent)…

LOW 35

Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torr…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02722 Published 2009-04-03 No fix listed CWE-352

TI-2008-00339 CVE-2008-0364 · GHSA-q395-g9g3-9q27

Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier…

LOW 34

Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to cause a denial of service (application cras…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08892 Published 2008-01-18 No fix listed CWE-119

TI-2008-00062 CVE-2008-0071 · GHSA-2crc-x37f-94vp

The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before…

LOW 30

The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Ran…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0719 Published 2008-06-16 No fix listed CWE-20

TI-2008-06854 CVE-2008-7166 · GHSA-xw3m-wfv2-qhh9

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and…

LOW 28

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a cr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02849 Published 2009-09-04 No fix listed CWE-119

TI-2014-04680 CVE-2014-5727 · GHSA-rv3c-2f8p-8rm5

The uTorrent Remote (aka com.utorrent.web) application 1.0.20110929 for Android does not…

LOW 24

The uTorrent Remote (aka com.utorrent.web) application 1.0.20110929 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informat…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310

Open these records in search →

Critical	3
High	3
Medium	6
Low	0
No CVSS	0