A vulnerability has been reported in Rasterbar Software libtorrent, which can be exploited by malicious people to potentially compromise an application using the library.

The vulnerability is caused due to the library insufficiently sanitising path elements extracted in Multiple File Mode. This can be exploited to potentially create or overwrite arbitrary files via path elements containing directory traversal sequences, included in a specially crafted ".torrent" file.

The vulnerability is reported in versions prior to 0.14.4.

Solution
Update to version 0.14.4.

Provided and/or discovered by
census

Original Advisory
http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456

http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/

Deep Links
Links available to Secunia VIM customers