CVE-2008-7166

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-04 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.

Affected products

Bittorrent: through 6.0.1; 3.9.1, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4 (+58)
Utorrent: through 1.7.6; 1.1.1, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7 (+14)

References

http://aluigi.altervista.org/adv/ruttorrent2-adv.txt
http://osvdb.org/42825
http://osvdb.org/42826
http://secunia.com/advisories/28686
http://secunia.com/advisories/28695
http://www.vupen.com/english/advisories/2008/0326
http://www.vupen.com/english/advisories/2008/0327
http://aluigi.altervista.org/adv/ruttorrent2-adv.txt
http://osvdb.org/42825
http://osvdb.org/42826
http://secunia.com/advisories/28686
http://secunia.com/advisories/28695

Get alerted when CVE-2008-7166 or the next vulnerability affects your stack