Unrated severityNVD Advisory· Published Jun 11, 2009· Updated Apr 23, 2026
CVE-2009-1760
CVE-2009-1760
Description
Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.
Affected products
4cpe:2.3:a:rasterbar_software:libtorrent:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:rasterbar_software:libtorrent:*:*:*:*:*:*:*:*range: <=0.14.3
- cpe:2.3:a:rasterbar_software:libtorrent:0:*:*:*:*:*:*:*
- cpe:2.3:a:rasterbar_software:libtorrent:0.12:*:*:*:*:*:*:*
- cpe:2.3:a:rasterbar_software:libtorrent:0.12.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- sourceforge.net/project/shownotes.phpnvdPatch
- www.securityfocus.com/bid/35262nvdPatch
- www.vupen.com/english/advisories/2009/1534nvdPatchVendor Advisory
- census-labs.com/news/2009/06/08/libtorrent-rasterbar/nvdExploitPatch
- secunia.com/advisories/35277nvdVendor Advisory
- secunia.com/advisories/35848nvd
- security.gentoo.org/glsa/glsa-200907-14.xmlnvd
- www.debian.org/security/2009/dsa-1815nvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/archive/1/504151/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/51008nvd
News mentions
0No linked articles in our index yet.