CVE-2009-1759: Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and…

PriorityP352critical9.3CVSS 2.0

AVNACMAuNCCICAC

EXPLOIT

EPSS

14.14%

96.1th percentile

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	ctorrent	< ctorrent 1.3.4-dnh3.2-1.1 (bookworm)	ctorrent 1.3.4-dnh3.2-1.1 (bookworm)
rahul	ctorrent	—	—
rahul	ctorrent	>= 0 < 1.3.4-dnh3.2-1.1	1.3.4-dnh3.2-1.1
rahul	ctorrent	>= 0 < 1.3.4-dnh3.2-1.1	1.3.4-dnh3.2-1.1
rahul	ctorrent	>= 0 < 1.3.4-dnh3.2-1.1	1.3.4-dnh3.2-1.1
rahul	ctorrent	>= 0 < 1.3.4-dnh3.2-1.1	1.3.4-dnh3.2-1.1
rahul	dtorrent	—	—
rahul	dtorrent	—	—
rahul	dtorrent	—	—
rahul	dtorrent	—	—

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C

osv9.3CRITICAL

vendor_debian9.3MEDIUM

vendor_redhat9.3CRITICAL

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.