CVE-2018-25042 - uTorrent memory corruption

Back Back to CVE browser

HIGH

uTorrent memory corruption

Published Jun 17, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.00%

Description

A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.

Affected products

Vendor n/a Product uTorrent Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

uTorrent

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (4)

https://bugs.chromium.org/p/project-zero/issues/detail?id=1524
x_refsource_MISCExploitIssue TrackingMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13814
Advisory
https://vuldb.com/?id.113805
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/
x_refsource_MISCNot Applicable

Link	Providers	Tags
https://bugs.chromium.org/p/project-zero/issues/detail?id=1524		x_refsource_MISCExploitIssue TrackingMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13814		Advisory
https://vuldb.com/?id.113805		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/		x_refsource_MISCNot Applicable