BitTorrent official uTorrent user has a security susceptibility
BitTorrent’s official client, uTorrent, has a security openness relating its web client that permits aggressors to take control of the application.
The concern was reported by Google Project Zero investigator Tavis Ormandy.
As per Project Zero’s policies, Ormandy provided BitTorrent 90 days to react to his statement.
BitTorrent led Ormandy a beta builds of uTorrent Classic which looked to fix the problem, while he warned there may still be security faults.
“I think there is still a lot of excessive remote attack surface, then I don’t have some way to break the new build exact now,” he said.
BitTorrent then rolled out a spot for the beta version of uTorrent and declared the security harms were static.
However, earlier today Ormandy revealed that BitTorrent had moved the vulnerability to a different location.
“The vulnerability is now public since a patch is existing, and BitTorrent take previously shattered their 90 days anyway. I see no extra choice for artificial users then to stop using uTorrent Web and contact BitTorrent and appeal a complete patch,” he said.
Post a Comment