CVE-2007-1385

CVE-2007-1385 affects KTorrent prior to version 2.1.2. The issue resides in chunkcounter.cpp and allows remote attackers to trigger a denial of service (crash) and heap corruption by supplying a negative or excessively large idx value. Affected component: KTorrent (KDE BitTorrent client). Underly...

CVE-2007-1385

chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service crash and heap corruption via a negative or large idx value...

CVE-2007-1384

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename...

CVE-2007-1385

chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service crash and heap corruption via a negative or large idx value...

CVE-2007-1384

Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename...

CVE-2007-1384

CVE-2007-1384 affects KTorrent prior to 2.1.2, via a directory traversal flaw in torrent.cpp that lets remote attackers overwrite arbitrary files by supplying torrent filenames containing ".." sequences. The issue, described as a vulnerability in KTorrent, enables partial integrity impact and cou...

ktorrent -- multiple vulnerabilities

Two problems have been found in KTorrent: KTorrent does not properly sanitize file names to filter out ".." components, so it's possible for an attacker to create a malicious torrent in order to overwrite arbitrary files within the filesystem. Messages with invalid chunk indexes aren't rejected...