Warning to uTorrent users.

There is an exploit running in the wild that can give full control of your computer if you download an improper torrent file.

For PoC : http://milw0rm.com/exploits/3296

There is a discussion about this:

http://filesharingtalk.com/vb3/news-...evealed-156164

actually, it's not because of improper .torrent file

but when u r running that vuln utorrent on vuln windows the attacker just use that compiled sploit vs your computer, and whike utorrent is running he actually bypass all walls ( firewall ect, )

and can do on your comp whatever he wants, until u just simply close utorrent.

thereis no running vuln app, there is no attacer connected to your comp.
that simple.

omg i don't want to get infected..i haven't installed the new version of utorrent yet so am i safe?

or should i switch to another client? if so which one?

Quote:

---

Originally Posted by asdfca

There is an exploit running in the wild that can give full control of your computer if you download an improper torrent file.

For PoC : http://milw0rm.com/exploits/3296

---

You're a bit late m8 - but thanks for the sentiment. ;)
Just update to the latest vn - b490 - available from.. well..you know ! ;)

that exploit only works on xp running service pack 1 .. if u guyz have sp2 , u r safe.. !

isnt that a buffer overflow exploit ??

Quote:

---

Originally Posted by bytetorrent

that exploit only works on xp running service pack 1 .. if u guyz have sp2 , u r safe.. !

isnt that a buffer overflow exploit ??

---

just read the code of that exploit and u will know, what actually it do.

heard build 490 is fine, is that right?

Quote:

---

Originally Posted by prima1

heard build 490 is fine, is that right?

---

is fine. I use it on Windows Vista

I use build 490 and dont have problems yet