|
|
| |
BitComet is "a p2p file-sharing freeware fully compatible with BitTorrent, which is one of the most popular p2p protocol designed for high-speed distribution of 100MB or GB sized files".
BitComet is vulnerable to a buffer overflow that allow remote attackers to cause the program to execute arbitrary code by supplying the product with a specially crafted BitTorrent request. |
| |
Credit:
The information has been provided by Fortinet Research.
|
| |
Vulnerable Systems:
* BitComet version 0.60
Immune Systems:
* BitComet version 0.61
A vulnerability in BitComet, allows remote attackers construct a special .torrent file and put it on any BitTorrent publishing web site. When a user downloads the .torrent file and clicks on publishers name, BitComet will crash. An attacker can run arbitrary code on victims' host by specially crafted .torrent file.
|
| Subject:
|
dirk |
Date: |
22 Jan. 2006 |
| From: |
dirkyahoo.com |
| Any more details ... anybody ? |
|
|
|
|
