CVE-2008-7166 - CVE House
Back to Database
Status published Medium CVE-2008-7166

Buffer overflow in the web interface in BitTorrent 6.0.1 (build...

Vulnerability Description

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-7166

Credits & Attribution

No credits recorded in the NVD database.

References

More from bittorrent

View All →
CVE-2020-8437
The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505)...
High 7.5
CVE-2015-5685
The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht )...
High 7.5
CVE-2015-5474
BitTorrent and uTorrent allow remote attackers to inject command line...
Critical 9.3
CVE-2015-2846
BitTorrent Sync allows remote attackers to execute arbitrary commands via...
Critical 9.3
CVE-2014-8515
The web interface in BitTorrent allows remote attackers to execute...
Medium 6.8

Affected Vendor

Affected Software

bittorrent, utorrent
Vulnerable Versions:
0, 3.9.1, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.4.0, 4.4.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.9.7, 4.9.8, 4.9.9, 4.20.0, 4.20.1, 4.20.2, 4.20.3, 4.20.4, 4.20.6, 4.20.7, 4.20.8, 4.20.9, 4.22.0, 4.22.1, 4.22.4, 4.24.0, 4.24.2, 4.26.0, 4.27.1, 4.27.2, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.2.0, 6.0, 1.1.1, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.2, 1.2.1, 1.2.2, 1.3, 1.4, 1.4.2, 1.5, 1.6, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5

Timeline

Official Publish: September 4th, 2009
Last Modified: September 17th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.