uTorrent exploit revealed

posted by soulxtc in bittorrent // 695 days 11 hours 37 minutes ago

According to IT security experts, the latest version of the µTorrent BitTorrent client server is vulnerable to remote exploits.

Today brings news that the popular BitTorrent client server uTorrent is vulnerable to hackers that can infiltrate your PC and execute arbitary code if a user opens a manipulated torrent tracker file.

The apparent "glitch" in the software is that torrent tracker fields may contain an "announce" field. Well, if this "announce" field is longer than 4800 bytes, an internal µTorrent buffer overflows, thereby allowing hackers to run their exploits.

For now it's only µTorrent 1.6 build 474 that is affected but, older versions may also contain the bug, and a new version to fix the problem is not yet available.

Users of the popular µTorrent BitTorrent client server are thereby warned to avoid downloading torrent trackers from untrusted sources or to simply switch to a different BitTorrent client server like my personal favorite, Azureus.

Defaced Security has published the remote exploit here, with the data also noting that it only works on Windows 2000 and XP.

So for all you brave souls that have already upgraded to Vista have nothing to fear, and as for all you MAC guys out there I'm sure you never worried in the first place.