📄 Transmission Torrent Parsing Integer Overflows

Torrent file parsing in Transmission suffers from multiple integer overflow vulnerabilities. I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtyp...

Transmission - Integer Overflows Parsing Torrent Files

Transmission - Integer Overflows Parsing Torrent Files I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtype trmalloc sizeof structtype...

Free Download Manager 3.0 Torrent Parsing 缓冲区溢出漏洞

No description provided by source...

Free Download Manager Torrent Parsing Buffer Overflow

No description provided by source. $Id: fdmtorrent.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2009-0184

Multiple buffer overflows in the torrent parsing implementation in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via 1 a long file name within a torrent file, 2 a long tracker URL in a torrent file, or 3 a long comment in a torrent file...

Buffer overflow

Multiple buffer overflows in the torrent parsing implementation in Free Download Manager FDM 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via 1 a long file name within a torrent file, 2 a long tracker URL in a torrent file, or 3 a long comment in a torrent file...

CVE-2009-0184

CVE-2009-0184 concerns Free Download Manager (FDM) with vulnerable torrent parsing in version 2.5 Build 758 and 3.0 Build 844. The issue is multiple buffer overflows in the torrent parser, triggered by crafted torrent fields such as a long file name, a long tracker URL, or a long comment, which c...