First published: Thu Aug 26 2010(Updated: )
Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
BitTorrent | =1.8.1-rc1 | |
BitTorrent | =2.0.2 | |
BitTorrent | =1.2.2 | |
BitTorrent | =1.8.3 | |
BitTorrent | =2.0.1 | |
BitTorrent | =1.7.4 | |
BitTorrent | =1.1.1 | |
BitTorrent | =1.7.2 | |
BitTorrent | =1.8.4 | |
BitTorrent | =1.1.6 | |
BitTorrent | =1.1.3 | |
BitTorrent | =2.0.3 | |
BitTorrent | =1.1.5 | |
BitTorrent | =1.7.5 | |
BitTorrent | =1.8.1 | |
BitTorrent | =1.2.1 | |
BitTorrent | =1.2 | |
BitTorrent | =1.1.7 | |
BitTorrent | =1.7 | |
BitTorrent | =1.8 | |
BitTorrent | =1.1.4 | |
BitTorrent | =1.8.2 | |
BitTorrent | =2.0 | |
BitTorrent | =1.7.1 | |
BitTorrent | =1.8.5 | |
BitTorrent | =1.7.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3129 is classified as a high-severity vulnerability due to its potential for remote code execution.
To mitigate CVE-2010-3129, update uTorrent to version 2.2 or later, which addresses the vulnerability.
Users of uTorrent versions 2.0.3 and earlier are affected by CVE-2010-3129, allowing for DLL hijacking attacks.
Yes, CVE-2010-3129 can potentially be exploited by remote attackers through malicious DLL interactions.
The impact of CVE-2010-3129 is the execution of arbitrary code on the affected system, compromising user security.