CVE-2008-4434: Bittorrent

High severity, CVSS 9.3. EPSS: 11% chance of exploitation in the next 30 days.

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file.

Affected products

• Bittorrent Bittorrent: up to and including 6.0.3; version 3.9.1 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …
• Utorrent Utorrent: up to and including 1.7.7; version 1.1.1 only; version 1.1.3 only; version 1.1.4 only; version 1.1.5 only; version 1.1.6 only; …

Published 2008-10-03. Last modified 2026-06-16.