CVE-2008-0071: Bittorrent

Medium severity, CVSS 4.3. EPSS: 7.2% chance of exploitation in the next 30 days.

The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.

Affected products

• Bittorrent Bittorrent: up to and including 6.0.2; version 3.9.1 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …
• Utorrent Utorrent: up to and including 1.7.7; version 1.1.1 only; version 1.1.3 only; version 1.1.4 only; version 1.1.5 only; version 1.1.6 only; …

Published 2008-06-16. Last modified 2026-06-16.