Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2010-0748 | third party advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0748 | issue tracking third party advisory patch |
https://trac.transmissionbt.com/ticket/2965 | issue tracking exploit vendor advisory |
https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192-20100314 | third party advisory release notes |
https://www.openwall.com/lists/oss-security/2010/04/01/9 | mailing list third party advisory patch |