Cloudanix VulnDB

CVE-2009-1759

None

CVSS

—

EPSS

13.7%

Published

May 22, 2009

CISA due date

—

The record

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

Affected packages

Ecosystem Package Introduced Fixed
Debian:10 ctorrent 0 1.3.4-dnh3.2-1.1
Debian:11 ctorrent 0 1.3.4-dnh3.2-1.1
Debian:12 ctorrent 0 1.3.4-dnh3.2-1.1
Debian:13 ctorrent 0 1.3.4-dnh3.2-1.1
Debian:5.0 ctorrent 0 1.3.4-dnh3.2-1+lenny1

Related vulnerabilities