CVE-2010-3129: Utorrent

High severity, CVSS 9.3. EPSS: 7.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse plugin_dll.dll, userenv.dll, shfolder.dll, dnsapi.dll, dwmapi.dll, iphlpapi.dll, dhcpcsvc.dll, dhcpcsvc6.dll, or rpcrtremote.dll that is located in the same folder as a .torrent or .btsearch file.

Affected products

• Utorrent Utorrent: version 1.1.1 only; version 1.1.3 only; version 1.1.4 only; version 1.1.5 only; version 1.1.6 only; version 1.1.7 only; …

Published 2010-08-26. Last modified 2026-06-16.