CVE-2010-1853

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-05-07 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted magnet URL with a large number of (1) tr or (2) ws links.

Affected products

Transmissionbt Transmission: 1.91

References

http://secunia.com/advisories/39031
http://trac.transmissionbt.com/changeset/10279
http://trac.transmissionbt.com/ticket/2965
http://trac.transmissionbt.com/wiki/Changes
http://www.osvdb.org/63066
http://www.securityfocus.com/bid/38814
http://www.vupen.com/english/advisories/2010/0655
http://secunia.com/advisories/39031
http://trac.transmissionbt.com/changeset/10279
http://trac.transmissionbt.com/ticket/2965
http://trac.transmissionbt.com/wiki/Changes
http://www.osvdb.org/63066

Get alerted when CVE-2010-1853 or the next vulnerability affects your stack