BitComet URI Buffer Overflow Vulnerability

CVE Category Price Severity
CVE-2009-2499 CWE-119 $N/A High
Author Risk Exploitation Type Date
Marcin Bury High Local 2006-01-28
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H 0.19396 0.99994

CVSS vector description

Our sensors found this exploit at:

Below is a copy:

Fortinet Security Advisory: FSA-2006-07

BitComet URI Buffer Overflow Vulnerability

Advisory Date      : January 18, 2006
Reported Date      : November 29, 2005
Vendor             : BitComet
Affected Products  : BitComet v0.60
Severity           : High
Reference          :

Description        :  Fortinet Security Research Team (FSRT) has
discovered a URI buffer overflow Vulnerability in the BitComet P2P Client
software. It indicates a possible exploit of buffer overflow vulnerability
in BitComet. BitComet is one of the most popular P2P Client for file
sharing, which uses bittorrent protocol. There is a bug in BitComet, a
remote attacker could construct a special .torrent file and put it on any
bt publish web site. When a user downloads the .torrent file and clicks on
publishers name, BitComet will crash. An attacker can run arbitrary
Command on victims host by specially crafted .torrent file.

Impact             : Execute arbitrary code

Solution           : BitComet has released a update for this
vulnerability, which is available for downloading from BitComet's web

Fortinet Protection: FortiGate series of security systems have been
updated to detect exploits targeting this vulnerability.

Acknowledgment     : Dejun Meng of Fortinet Security Research team found
this vulnerability.

Disclaimer         : Although Fortinet has attempted to provide accurate
information in these materials, Fortinet assumes no legal responsibility
for the accuracy or completeness of the information. More specific
information is available on request from Fortinet. Please note that
Fortinet's product information does not constitute or contain any
guarantee, warranty or legally binding representation, unless expressly
identified as such in a duly signed writing.

Copyright ©2024 Exploitalert.

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum