GCVE - cpe:2.3:a:bittorrent:bittorrent:4.0.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bittorrent:bittorrent:4.0.4:*:*:*:*:*:*:*

part: a version: 4.0.4 update: *

Vendor	Bittorrent (`d480f607-4f95-5b32-bec9-bb37e506a1d3`)
Product	Bittorrent (`865fbe3b-1031-52d3-ae1c-942cece9a5cd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-7166`	vulnerable	2026-06-08 04:51:05.759644	Details available Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364. Published: 2009-09-04T10:00:00.000Z Updated: 2024-09-17T02:36:31.756Z Open on db.gcve.eu Reference links http://aluigi.altervista.org/adv/ruttorrent2-adv.txt http://secunia.com/advisories/28695 http://osvdb.org/42826 http://www.vupen.com/english/advisories/2008/0327 http://osvdb.org/42825	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4434`	vulnerable	2026-06-08 04:50:38.915517	Details available Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file. Published: 2008-10-03T22:00:00.000Z Updated: 2024-08-07T10:17:09.696Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1020664 http://secunia.com/advisories/31441 http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf http://www.vupen.com/english/advisories/2008/2341 http://www.vupen.com/english/advisories/2008/2340	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0071`	vulnerable	2026-06-08 04:50:10.118933	Details available The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header. Published: 2008-06-16T18:26:00.000Z Updated: 2024-08-07T07:32:23.931Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3943 http://secunia.com/advisories/28703 http://secunia.com/secunia_research/2008-7/advisory/ http://www.securityfocus.com/bid/29661 http://www.vupen.com/english/advisories/2008/1809	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.