Today brings news that the popular BitTorrent client server uTorrent is vulnerable to hackers that can infiltrate your PC and execute arbitary code if a user opens a manipulated torrent tracker file.

The apparent "glitch" in the software is that torrent tracker fields may contain an "announce" field. Well, if this "announce" field is longer than 4800 bytes, an internal µTorrent buffer overflows, thereby allowing hackers to run their exploits.

For now it's only µTorrent 1.6 build 474 that is affected but, older versions may also contain the bug, and a new version to fix the problem is not yet available.

Users of the popular µTorrent BitTorrent client server are thereby warned to avoid downloading torrent trackers from untrusted sources or to simply switch to a different BitTorrent client server like  Azureus.

Defaced Security has published the remote exploit here, with the data also noting that it only works on Windows 2000 and XP.

So for all you that have already upgraded to Vista have nothing to fear, and as for all MAC users out there I'm sure you never worried in the first place.

Recommend this article...