Detects Two Serious Vulnerabilities on Utorrent That Can Help Hackers Execute

Hackers can take advantage of these two vulnerabilities to view the history of downloading or executing malware on a user's computer.

Detects Two Serious Vulnerabilities on Utorrent That Can Help Hackers Execute Overview

Security researcher Tavis Ormandy had to wait 90 since he notified uTorrent to announce his findings to users.

Security researcher Tavis Ormandy had to wait 90 since he notified uTorrent to announce his findings to users Tavis Ormandy's announcement on Twitter.

According to Ormandy, uTorrent's desktop version and web version vulnerabilities are related to various JSON-RPC issues. Both use a web interface to display web content.

By hiding commands (downloading malware to your computer's startup folder or accessing user download information) within web pages and interacting with uTorrent's RPC servers, An attacker with a fake website can exploit the client side vulnerability.

BitTorrent said the vulnerability was fixed in the most recent beta version of the desktop uTorrent Windows app. A patch for existing customers will be released in the next few days.

To fix this vulnerability, users can download a vulnerable version of the desktop version 3. 5. 3. 44352 (http://www. utorrent. com/downloads/complete/track/beta/os/win).

See more:

The source code for iOS is revealed on GitHub as 'real goods', this is the time to reveal the biggest information in history
How to protect high-risk network ports?
Microsoft released an emergency patch for Windows, turned off the Specter patch, causing a drop in system performance
Critical vulnerabilities discovered in Framework Electron, Skype, Slack, Twitch and a series of affected apps

Security note: Threat conditions and vendor guidance can change. Install current updates and verify any advisory with the official vendor before taking action.

FAQ

Why does detects Two Serious Vulnerabilities on Utorrent That Can Help Hackers Execute matter?

Hackers can take advantage of these two vulnerabilities to view the history of downloading or executing malware on a user's computer.

Who may be affected by this issue?

The impact depends on the affected product, version, account, device, or network. Review the article details and the vendor's current advisory to confirm whether your environment is exposed.

How can users reduce the risk?

Install current security updates, use official downloads, enable strong account protection, maintain tested backups, and follow the latest guidance from the relevant vendor.