BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.
References
Link | Resource |
---|---|
http://www.zerodayinitiative.com/advisories/ZDI-15-358/ |
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-08-13 07:59
Updated : 2015-08-13 11:28
NVD link : CVE-2015-5474
Mitre link : CVE-2015-5474
JSON object : View
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Products Affected
bittorrent
- bittorrent
utorrent
- utorrent