Rich Johnson

**Name of the Vulnerable Software and Affected Versions** KTorrent versions prior to 2.1.2 **Description** A directory traversal issue exists, allowing remote attackers to overwrite arbitrary files by using ".." sequences in a torrent filename. **Recommendations** For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** KTorrent versions prior to 2.1.2 **Description** The issue allows remote attackers to cause a denial of service (crash) and heap corruption via a negative or large `idx` value in the `chunkcounter.cpp` file. **Recommendations** For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue.