The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
BitComet URI Buffer Overflow
------------------------------------------------------------------------
SUMMARY
<http://www.bitcomet.com/> BitComet is "a p2p file-sharing freeware fully
compatible with BitTorrent, which is one of the most popular p2p protocol
designed for high-speed distribution of 100MB or GB sized files".
BitComet is vulnerable to a buffer overflow that allow remote attackers to
cause the program to execute arbitrary code by supplying the product with
a specially crafted BitTorrent request.
DETAILS
Vulnerable Systems:
* BitComet version 0.60
Immune Systems:
* BitComet version 0.61
A vulnerability in BitComet, allows remote attackers construct a special
torrent file and put it on any BitTorrent publishing web site. When a
user downloads the .torrent file and clicks on publishers name, BitComet
will crash. An attacker can run arbitrary code on victims' host by
specially crafted .torrent file.
ADDITIONAL INFORMATION
The information has been provided by <mailto:vulnmonitor@fortinet.com>
Fortinet Research.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
