Torrent.File.Publisher.URI.Too.Long

description-logoDescription

It indicates a possible exploit of a buffer overflow vulnerability in BitComet Client.
This flaw is due to a buffer overflow error when processing a specially crafted ".torrent" file containing an overly long publisher's name, which could be exploited by attackers to compromise a vulnerable system, by convincing a user to download a malicious ".torrent" file and click on the publisher's name.

affected-products-logoAffected Products

BitComet Client version 0.60 and prior

Impact logoImpact

The execution of arbitrary code on the system.

recomended-action-logoRecommended Actions

Upgrade to BitComet Client version 0.61 :
http://www.bitcomet.com/doc/download.htm

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)