CVE-2009-1759

2009-05-2211:52:40

CWE-119

mitre

web.nvd.nist.gov

cve-2009-1759

buffer overflow

btfiles::buildfrommi

enhanced ctorrent

dtorrent

ctorrent

denial of service

remote attack

arbitrary code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.224

Percentile

96.5%

JSON

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

Affected configurations

Nvd

Node

rahuldtorrentMatch3.2.0

rahuldtorrentMatch3.3.0

rahuldtorrentMatch3.3.1

rahuldtorrentMatch3.3.2

Node

rahulctorrentMatch1.3.4

VendorProductVersionCPE
rahuldtorrent3.2.0cpe:2.3:a:rahul:dtorrent:3.2.0:*:*:*:*:*:*:*
rahuldtorrent3.3.0cpe:2.3:a:rahul:dtorrent:3.3.0:*:*:*:*:*:*:*
rahuldtorrent3.3.1cpe:2.3:a:rahul:dtorrent:3.3.1:*:*:*:*:*:*:*
rahuldtorrent3.3.2cpe:2.3:a:rahul:dtorrent:3.3.2:*:*:*:*:*:*:*
rahulctorrent1.3.4cpe:2.3:a:rahul:ctorrent:1.3.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rahul	dtorrent	3.2.0	cpe:2.3:a:rahul:dtorrent:3.2.0:::::::*
rahul	dtorrent	3.3.0	cpe:2.3:a:rahul:dtorrent:3.3.0:::::::*
rahul	dtorrent	3.3.1	cpe:2.3:a:rahul:dtorrent:3.3.1:::::::*
rahul	dtorrent	3.3.2	cpe:2.3:a:rahul:dtorrent:3.3.2:::::::*
rahul	ctorrent	1.3.4	cpe:2.3:a:rahul:ctorrent:1.3.4:::::::*