- 10 IT security companies to watch
- Mobile phone chargers are energy vampires
- Smartphone smackdown: Storm vs. iPhone
- Video game collisions I'd like to see
- Court slams door on sale of spyware
One of the most popular programs used by some to illegally share files under copyright has patched a serious software vulnerability.
The problem affects the peer-to-peer program uTorrent as well as BitTorrent Mainline, another program based on the uTorrent code. It has been classified as "highly critical," the second most severe ranking of risk, by Secunia, a security vendor in Denmark.
Both programs use the BitTorrent protocol, which has become the most popular method of file sharing worldwide, according to iPoque, a company in Leipzig, Germany, that specializes in traffic-management appliances for ISPs. The programs collect pieces of a particular file from other computers around the world and assemble it.
The vulnerability can be exploited if a user downloads a malicious torrent, which is a text file that coordinates the downloading of content. The problem causes a stack overflow, which can allow an attacker to upload other malicious software to a PC.
The bug was in the software for at least two years, wrote Rhys Kidd, who is credited with the find and has written a short paper describing the problem.
Users should upgrade to the latest version, 1.8, which also includes support for the IPv6, which increases the number of IP addresses available on the Internet. Utorrent will also prompt users to download the upgrade. The latest version of BitTorrent is available on its Web site.
Rss FeedRss Feed
| NetworkWorld, Inc. | About Network World, Inc. | Advertise | Careers | Contact us | Terms of Service/Privacy | Reprints and links | Partnerships | Press room | Subscribe to NW |
| IDG, Inc. | CIO | Computerworld | CSO | Demo | GamePro | Games.net | IDGconnect.com | IDG World Expo | Infoworld | JavaWorld.com | LinuxWorld.com | MacUser | Macworld | PC World | Playlistmag.com | The Industry Standard | IDG List Services | IDG TechNetwork |
 The Leader in Network Knowledge© 1994-2008 Network World, Inc. All rights reserved. |
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment