BitComet Torrent File Handling Remote Buffer Overflow Vulnerability

Bugtraq ID:	16311
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2006 12:00AM
Updated:	Feb 07 2006 08:55PM
Credit:	Discovered by Dejun Meng of Fortinet Security Research.
Vulnerable:	BitComet BitComet 0.60
Not Vulnerable:	BitComet BitComet 0.61

BitComet Torrent File Handling Remote Buffer Overflow Vulnerability

BitComet is prone to a buffer-overflow vulnerability.

This issue presents itself when the application attempts to process a malformed '.torrent' file.

Exploitation of this issue could allow attacker-supplied machine code to be executed in the context of the affected application.

BitComet 0.60 is reportedly vulnerable. Other versions may be affected as well.

BitComet Torrent File Handling Remote Buffer Overflow Vulnerability


A exploit (BitComet_dos_exp.c) that triggers a crash has been supplied by <[email protected]>.

• /data/vulnerabilities/exploits/BitComet_dos_exp.c

BitComet Torrent File Handling Remote Buffer Overflow Vulnerability

Solution:
The vendor has released BitComet 0.61 to address this issue.


BitComet BitComet 0.60

• BitComet BitComet 0.61
  http://www.bitcomet.com/doc/download.htm

BitComet Torrent File Handling Remote Buffer Overflow Vulnerability

References:

• BitComet Home Page (BitComet)
  
• Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability ("Fortinet Research" )