uTorrent 1.7.7 Stable Released

posted by soulxtc in bittorrent // 294 days 20 hours 26 minutes ago

Fixes security issue that allowed hackers to execute DOS attacks via WebUI and the potential to do so with extension protocol.

Earlier this month it was reported how the uTorrent BitTorrent server server was vulnerable to a remote crash bug via WebUI.

Luigi Auriemma, the security expert who discovered the flaw, pointed it out in his advisory listing page. He wrote:

Exists a problem with the handling of the Range header received in the HTTP request of the browser which can be exploited for crashing the remote uTorrent/BitTorrent client if the WebUI interface is in use.

For doing this is enough that an attacker sends some consecutive HTTP requests using a Range header which increases each time. After about 40 connections the client crashes due to the access to the end of the available memory.

uTorrent developers were to quick to release an updated version that addressed the remote crash bug, but not the (potential) remote crash bug with extension protocol. uTorrent 1.7.7 Stable does.