CVEvulnerability
CVE-2018-25042
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-06-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.0 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119, CWE-787
Description
A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.
Affected configurations
• bittorrent utorrent
Related
References
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 Exploit, Issue Tracking, Mailing List, Third Party Advisory
- https://vuldb.com/?id.113805 Exploit, Third Party Advisory, VDB Entry
- https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/ Not Applicable
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1524 Exploit, Issue Tracking, Mailing List, Third Party Advisory
- https://vuldb.com/?id.113805 Exploit, Third Party Advisory, VDB Entry
- https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/ Not Applicable