Unrated severityNVD Advisory· Published May 7, 2010· Updated Jun 16, 2026

CVE-2010-1853

Description

Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted magnet URL with a large number of (1) tr or (2) ws links.

Affected products

Transmissionbt/Transmission2 versions
cpe:2.3:a:transmissionbt:transmission:1.91:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:transmissionbt:transmission:1.91:*:*:*:*:*:*:*
- (no CPE)range: <=1.91

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/38814nvdPatch
secunia.com/advisories/39031nvdVendor Advisory
www.vupen.com/english/advisories/2010/0655nvdVendor Advisory
trac.transmissionbt.com/changeset/10279nvd
trac.transmissionbt.com/ticket/2965nvd
trac.transmissionbt.com/wiki/Changesnvd
www.osvdb.org/63066nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000