GCVE - cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bittorrent:bittorrent:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Bittorrent (`d480f607-4f95-5b32-bec9-bb37e506a1d3`)
Product	Bittorrent (`865fbe3b-1031-52d3-ae1c-942cece9a5cd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-5474`	vulnerable	2026-06-08 05:06:50.106853	Details available BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol. Published: 2015-08-13T14:00:00.000Z Updated: 2024-08-06T06:50:02.435Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-15-358/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8515`	vulnerable	2026-06-08 05:06:09.053978	Details available The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000. Published: 2014-12-12T15:00:00.000Z Updated: 2024-08-06T13:18:48.328Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-14-418/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-7166`	vulnerable	2026-06-08 04:51:05.756587	Details available Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364. Published: 2009-09-04T10:00:00.000Z Updated: 2024-09-17T02:36:31.756Z Open on db.gcve.eu Reference links http://aluigi.altervista.org/adv/ruttorrent2-adv.txt http://secunia.com/advisories/28695 http://osvdb.org/42826 http://www.vupen.com/english/advisories/2008/0327 http://osvdb.org/42825	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4434`	vulnerable	2026-06-08 04:50:38.912660	Details available Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file. Published: 2008-10-03T22:00:00.000Z Updated: 2024-08-07T10:17:09.696Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1020664 http://secunia.com/advisories/31441 http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf http://www.vupen.com/english/advisories/2008/2341 http://www.vupen.com/english/advisories/2008/2340	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0364`	vulnerable	2026-06-08 04:50:10.842723	Details available Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to cause a denial of service (application crash) via a long Unicode string representing a client version identifier. Published: 2008-01-18T22:00:00.000Z Updated: 2024-08-07T07:39:34.610Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/27321 http://aluigi.org/poc/ruttorrent.zip http://secunia.com/advisories/28537 http://secunia.com/advisories/28533 http://www.securityfocus.com/archive/1/486426/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0071`	vulnerable	2026-06-08 04:50:10.114775	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.