Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@Tredoin @CollegeNotPog Bonus feature with this version, you can download this torrent to close utorrent instead of clicking Quit. https://github.com/mavlevin/uTorrent-CVE-2020-8437/blob/master/malicious.torrent
Post summary
A malicious torrent file for CVE-2020-8437 is shared, providing a proof‑of‑concept exploit, but there is no evidence of active exploitation or available fixes.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bittorrent | utorrent | - | - | - |