Lucene search
HistoryAug 13, 2015 - 2:59 p.m.
CVE-2015-5474
cve-2015-5474
bittorrent
utorrent
remote attackers
command injection
crafted url
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.284 Low
EPSS
Percentile
96.9%
BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.
Affected configurations
Node
bittorrentbittorrent
ORutorrentutorrent
| CPE | Name | Operator | Version |
|---|---|---|---|
| bittorrent:bittorrent | bittorrent | eq | * |
| utorrent:utorrent | utorrent | eq | * |
Related
nvd
nvd
CVE-2015-5474
2015-08-13 14:59:06
prion
prion
Design/Logic Flaw
2015-08-13 14:59:00
cvelist
cvelist
CVE-2015-5474
2015-08-13 14:00:00
zdi
zdi
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.284 Low
EPSS
Percentile
96.9%
Related for CVE-2015-5474