CVE-2009-1759

EPSS 46.8%

ctorrent - arbitrary code execution

Published: 5/22/2009Modified: 4/28/2026

Description

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path.

Affected packages (2)

Debian/ctorrentfrom 0, < 1.3.4-dnh3.2-1.1
Debian/ctorrentfrom 0, < 1.3.4-dnh3.2-1+lenny1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-1759