CVE-2015-5474

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-08-13 · updated 2026-06-17
Weakness: CWE-77

Description

BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.

Affected products

Bittorrent: all versions
Utorrent: all versions

References

http://www.zerodayinitiative.com/advisories/ZDI-15-358/
http://www.zerodayinitiative.com/advisories/ZDI-15-358/

Get alerted when CVE-2015-5474 or the next vulnerability affects your stack