CVE-2015-5474

BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2015-08-13

Last modified

2024-08-06

Weaknesses

CWE-77

Affected products

• Bittorrent (Bittorrent)
• Utorrent (Utorrent)

References

• http://www.zerodayinitiative.com/advisories/ZDI-15-358/