New uTorrent Release due to Windows DLL Vulnerability

[DaBees-Knees]

http://www.p2pon.com/2010/08/27/new-utorrent-release-due-to-windows-dll-vulnerability/

A DLL load hijacking vulnerability in the Windows operating system, has affected dozens of applications which become quickly a target for remote hijack exploits. Since Microsoft refuses to patch Windows, the developers of the affected applications have to take measures on their own.

The list of vulnerable programs contains familiar names such as Firefox, Adobe Photoshop, VLC and also the popular BitTorrent client uTorrent. Upon hearing the news the uTorrent developer team didn’t sit still and yesterday an essential update was released that should fix the DLL vulnerability.

“There is a DLL vulnerability in all versions of Windows affecting a great deal of software applications. Subsequently, attack code targeting the uTorrent client surfaced on a third-party website, and while so far no attacks have been reported to us, we have released uTorrent 2.0.4 to fix this vulnerability” uTorrent Community Manager explained.

The new version disables loading of DLLs from the current working directory and prevents this exploit from functioning.

Therefore, all uTorrent users must update their clients to the most recent version.

Good old Windows say some.