ktorrent
Page content
- Author: voroskoi
- Vulnerable: 2.1.2-1
- Unaffected: 2.1.4-1terminus1
Two vulnerabilities have been reported in KTorrent, which can be exploited by malicious people to overwrite arbitrary files on a user’s system or to potentially compromise a user’s system.
- An input validation error when processing paths of filenames within torrents can be exploited to e.g. overwrite arbitrary files with the privileges of the user running the application via directory traversal attacks.
- An error in the processing of messages with invalid chunk indexes can be exploited to corrupt memory and may allow execution of arbitrary code.
- Bug Tracker URL: http://bugs.frugalware.org/task/2012