CVE-2010-1853: Buffer Overflow

Published May 7, 2010

Updated

Multiple stack-based buffer overflows in the trmagnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted magnet URL with a large number of (1) tr or (2) ws links.

Affected Software

1 affected component

transmissionbt Transmission=1.91

Remediation

Patch Available

http://www.securityfocus.com/bid/38814

Event History

May 7, 2010

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-1853?

CVE-2010-1853 has a medium severity rating due to its potential for denial of service and arbitrary code execution.

How do I fix CVE-2010-1853?

To fix CVE-2010-1853, you should upgrade to a version of Transmission that is newer than 1.91.

What is affected by CVE-2010-1853?

CVE-2010-1853 specifically affects Transmission version 1.91.

What type of attack does CVE-2010-1853 enable?

CVE-2010-1853 enables remote attackers to crash the application or potentially execute arbitrary code.

What component is involved in CVE-2010-1853?

CVE-2010-1853 involves multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c.