{"api_version":"1","generated_at":"2026-07-23T10:07:03+00:00","cve":"CVE-2018-25042","urls":{"html":"https://cve.report/CVE-2018-25042","api":"https://cve.report/api/cve/CVE-2018-25042.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-25042","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-25042"},"summary":{"title":"CVE-2018-25042","description":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.","state":"PUBLIC","assigner":"cna@vuldb.com","published_at":"2022-06-17 13:15:00","updated_at":"2022-06-29 13:48:00"},"problem_types":["CWE-787"],"metrics":[],"references":[{"url":"https://vuldb.com/?id.113805","name":"https://vuldb.com/?id.113805","refsource":"MISC","tags":[],"title":"Login required","mime":"text/html","httpstatus":"401","archivestatus":"404"},{"url":"https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/","name":"https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/","refsource":"MISC","tags":[],"title":"uTorrent apps vulnerable to remote code execution, information disclosure","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1524","name":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1524","refsource":"MISC","tags":[],"title":"1524 - \n utorrent: various JSON-RPC issues resulting in remote code execution, information disclosure, etc. - \n \n project-zero -\n \n \n Monorail","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25042","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25042","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"25042","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bittorrent","cpe5":"utorrent","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2018-25042","TITLE":"uTorrent memory corruption","REQUESTER":"cna@vuldb.com","ASSIGNER":"cna@vuldb.com","STATE":"PUBLIC"},"generator":"vuldb.com","affects":{"vendor":{"vendor_data":[{"vendor_name":"","product":{"product_data":[{"product_name":"uTorrent","version":{"version_data":[{"version_value":"n/a"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-119 Memory Corruption"}]}]},"description":{"description_data":[{"lang":"eng","value":"A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component."}]},"credit":"Tavis Ormandy","impact":{"cvss":{"version":"3.1","baseScore":"5.0","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"}},"references":{"reference_data":[{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1524","refsource":"MISC","name":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1524"},{"url":"https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/","refsource":"MISC","name":"https://www.scmagazineuk.com/utorrent-apps-vulnerable-to-remote-code-execution-information-disclosure/article/746248/"},{"url":"https://vuldb.com/?id.113805","refsource":"MISC","name":"https://vuldb.com/?id.113805"}]}},"nvd":{"publishedDate":"2022-06-17 13:15:00","lastModifiedDate":"2022-06-29 13:48:00","problem_types":["CWE-787"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:bittorrent:utorrent:-:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}