
| Posted: Sat Sep 04, 2010 09:20 Author: 
There is a lot of confusion right now concerning the most popular torrent client "uTorrent".
And now It's been discovered that many programs along with uTorrent (including Photoshop, VLC Player, and Firefox) are affected by a recent Windows DLL vulnerability that allows a hacker to take control of your computer. I don't want to add to the confusion but members should know;
According to uTorrent and others any version
between
uTorrent version 1.8.2 (build 14458) and uTorrent version 2.0.4 (build 21586), is exposed to these serious security risks.
Users who downgrade should not downgrade to newer than 1.8.2
The latest version 2.0.4 build 21586 is said to have fixed this security risk and another unrelated issue that causes problems at torrent sites, but until this is proven all users should just use 1.8.2 (build 14458) or
older
.
Microsoft cannot easily stop this security risk, so don't expect a Windows update to fix this or your Anti-Virus to stop it. If you use Photoshop, VLC Player, and Firefox be sure you update to the latest versions. Also you should uncheck "Check for updates automatically" in the preferences/general tab of uTorrent (for now anyway).
Now that you are informed, it's up to you but understand according to many experts, this hacker risk can affect others you share files with as well as your torrent site.
When "downgrading" you will not loose your torrents if you follow Mariska's easy instructions here:
http://xtremetv.org/tsf_forums/showthread.php?tid=636
Download 1.8.2 (build 14458) here:
http://www.filehippo.com/download_utorrent/5203/
or here:
http://www.4shared.com/file/YGVZEtJZ/uTo..._Stabl.htm
More information:
"This one is kinda nasty and can be very effective to contaminate large amounts of people. A torrent can contain large numbers of files and can be used to get a malicious dll downloaded together with clean files without being noticed. This is very dangerous, especially if a big torrent tracker or database can be compromised."
Real world examples:
1. Attacker posts a custom torrent in a public tracker, which contains a pack of mp3s and a malicious dll. Victim goes listen it’s new song album and get infected.
2. Attacker gains admin access to a torrent database (this actually happened to ThePirateBay not so long ago) and changes a legitimate high-traffic torrent for a infected one. This could cause a massive infection in a matter of minutes.
Tip: Make sure there are no dlls in the current folder before opening any kind of file. If you own a tracker or database make sure your webserver and/or database are not vulnerable to any kind of vulnerability like SQL injections, XSS etc."
and more:
http://torrentfreak.com/utorrent-quickly...ty-100826/
http://www.reuters.com/article/idUS2168761020100825
http://forum.utorrent.com/viewtopic.php?id=82840
|