CVE-2007-1799

CVE-2007-1799 affects KTorrent prior to 2.1.3. A directory traversal vulnerability exists in torrent.cpp where only the string ".." is checked; manipulated ".." sequences in torrent filenames (e.g., "../") can allow a remote attacker to overwrite arbitrary files. This stems from an incomplete fix...

CVE-2007-1385

CVE-2007-1385 affects KTorrent prior to version 2.1.2. The issue resides in chunkcounter.cpp and allows remote attackers to trigger a denial of service (crash) and heap corruption by supplying a negative or excessively large idx value. Affected component: KTorrent (KDE BitTorrent client). Underly...

CVE-2007-1384

CVE-2007-1384 affects KTorrent prior to 2.1.2, via a directory traversal flaw in torrent.cpp that lets remote attackers overwrite arbitrary files by supplying torrent filenames containing ".." sequences. The issue, described as a vulnerability in KTorrent, enables partial integrity impact and cou...