CVE-2018-25042

A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:bittorrent:utorrent:-:*:*:*:*:*:*:*

History

29 Jun 2022, 13:48

Type Values Removed Values Added
CWE CWE-787
CPE cpe:2.3:a:bittorrent:utorrent:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 6.8
v3 : 8.8
References (MISC) https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - (MISC) https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 - Exploit, Issue Tracking, Mailing List, Third Party Advisory
References (MISC) https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/ - (MISC) https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/ - Not Applicable
References (MISC) https://vuldb.com/?id.113805 - (MISC) https://vuldb.com/?id.113805 - Exploit, Third Party Advisory, VDB Entry

17 Jun 2022, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-06-17 13:15

Updated : 2024-02-04 22:29


NVD link : CVE-2018-25042

Mitre link : CVE-2018-25042

CVE.ORG link : CVE-2018-25042


JSON object : View

Products Affected

bittorrent

  • utorrent
CWE
CWE-787

Out-of-bounds Write

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer