Enhanced Ctorrent / Dtorrent "btfiles::buildfrommi()" Buffer Overflow

[Peaches]

Enhanced CTorrent / dtorrent "btFiles::BuildFromMI()" Buffer Overflow

Highly critical

A vulnerability has been discovered in Enhanced CTorrent, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the function "btFiles::BuildFromMI()" in btfiles.cpp and can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into opening a specially crafted torrent file.

The vulnerability is confirmed in version 3.3.2. Other versions may also be affected.

Secunia advisories - http://secunia.com/advisories/34752