uTorrent has a dangerous security flaw

Written by Petteri Pyyny @ 22 Feb 2018 8:06 User comments (3)

BitTorrent and its lighter version, uTorrent have a serious security flaw.

Google researcher found a technique that allows attackers to direct DNS requests to user's computer, allowing to spoof the download sources, download files, add them to startup folder and more.

All versions of uTorrent and BitTorrent are affected and bug is only fixed in latest beta.

"On December 4, 2017, we were made aware of several vulnerabilities in the uTorrent and BitTorrent Windows desktop clients. We began work immediately to address the issue. Our fix is complete and is available in the most recent beta release (build 3.5.3.44352 released on 16 Feb 2018). This week, we will begin to deliver it to our installed base of users. All users will be updated with the fix automatically over the following days. The nature of the exploit is such that an attacker could craft a URL that would cause actions to trigger in the client without the user's consent (e.g. adding a torrent).

BitTorrent was also made aware yesterday that it's new beta product, uTorrent Web, is vulnerable to a similar bug. "

You can download the latest beta of uTorrent from our software section:

uTorrent for Windows

Tags: security exploit security breach security bug BitTorrent uTorrent

<PlayStation profiles now accessible from web browsers >Disney fails to block Redbox from reselling movie download codes

3 user comments

122.2.2018 12:55

hearme0

Send private message to this user

Senior Member

I torrent stuff, not rampantly leeching by any stretch of the imagination but I do download.

A torrent is a torrent is a torrent. The protocol remains the same for the most part and rather unchanged. Utorrent 2.2.1 is the last Utorrent before they implemented ads. This in turn should be impervious to the current vulnerability as there aren't any ads to be exploited. Some say 2.2.0 but 2.2.1 is indeed the only and BEST torrent client available..........PERIOD!

222.2.2018 19:49

Bozobub

Send private message to this user

Senior Member

The only other viable alternative to 2.2.1 is 1.8.1; 2.2.0 had several dire flaws, actually, that are not present in either 1.8.1 (which does not handle magnet links, IIRC) and 2.2.1.

322.2.2018 21:47

scorpNZ

Send private message to this user

AfterDawn Addict

Stopped using UT late 2016 for qBittorrent

hearme0 the new marvel anti hero aka "the leech" he'll suck the life right out of you,run for your lives

Comments have been disabled for this article.

	VLC hits milestone: over 5 billion downloads (16 Mar 2024 4:31) VLC Media Player, the versatile video-software powerhouse, has achieved a remarkable feat: it has been downloaded over 5 billion times. 1 user comment
	Sideloading apps to Android gets easier, as Google settles its lawsuit (19 Dec 2023 11:09) Google settled its lawsuit in September 2023, and one of the settlement terms was that the way applications are installed on Android from outside the Google Play Store must become simpler. In the future, installing APK files will be easier. 8 user comments
	Roomba Combo j7+ review - Clever trick allows robot vacuum finally to tackle home with rugs and carpets (06 Jun 2023 9:19) Roomba Combo j7+ is the very first Roomba model to combine robot vacuum with mopping features. And Roomba Combo j7+ does all that with a very clever trick, which tackles the problem with mopping and carpets. But is it any good? We found out.
	Neato, the robot vacuum company, ends its operations (02 May 2023 3:38) Neato Robotics has ceased its operations. American robot vacuum pioneer founded in 2005 has finally called it quits and company will cease its operations and sales. Only a skeleton crew will remain who will keep the servers running until 2028. 5 user comments
	How to Send Messages to Yourself on WhatsApp (20 Mar 2023 1:25) The world's most popular messaging platform, Meta-owned WhatsApp has enabled sending messages to yourself. While at first, this might seem like an odd feature, it can be very useful in a lot of situations. .... 18 user comments

	GUIDE: Wi-Fi speeds are slow? Here are some tips Having problems with Wi-Fi speed and stability at home? Here are some tips to follow to alleviate the issues. 1 user comment
	Guide: Phone battery drains quickly - how to fix (iPhone / Android) In this guide, we go through the most typical reasons for rapid battery drain with phones, and look at potential reasons or solutions.
	HOWTO: Install Netflix App on rooted Android device 'This app is no longer compatible with your device. Contact the developers for more info.' If you are getting this message from Google Play when trying to install Netflix, then maybe this little guide can help you.
	Windows 11: Check if TPM is enabled on your computer In this short guide we will look at how you can check the status of Trusted Platform Module (TPM) on your PC ahead of the coming launch of Windows 11.
	Guide: Is Your Wi-Fi Sluggish or Slow? Here's How to Fix Do you have problems with you Wi-Fi? Slow connection or is it cutting off constantly? This guide aims to remedy these problems. 1 user comment

uTorrent has a dangerous security flaw

3 user comments

Latest news

Reviews

Guides

News archive

Subscribe

Sections:

Follow us:

	Roomba Combo j7+ review - Clever trick allows robot vacuum finally to tackle home with rugs and carpets Roomba Combo j7+ is the very first Roomba model to combine robot vacuum with mopping features. And Roomba Combo j7+ does all that with a very clever trick, which tackles the problem with mopping and carpets. But is it any good? We found out.
	Review: Samsung Jet Bot 90 AI+ - a high-end robot vacuum cleaner Samsung's Jet Bot 90 AI+ is a top-class robot vacuum cleaner that can avoid obstacles and empty its own dust container. Here we review the product. 1 user comment
	Samsung Jet Bot 80+ review - excellent robot vacuum cleaner We review Samsung's Jet Bot 80+ robot vacuum cleaner over a period of three months. 1 user comment