CVE-2008-7166: Bittorrent

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364.

Affected products

• Bittorrent Bittorrent: up to and including 6.0.1; version 3.9.1 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …
• Utorrent Utorrent: up to and including 1.7.6; version 1.1.1 only; version 1.1.3 only; version 1.1.4 only; version 1.1.5 only; version 1.1.6 only; …

Published 2009-09-04. Last modified 2026-06-16.