PT-2012-1353 · Wxbitcoin+1 · Wxbitcoin+1

CVE-2010-5141 · Publicado 2012-08-06 · Atualizado 2023-12-27

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions bitcoind versions prior to 0.3.5 wxBitcoin versions prior to 0.3.5

Description The issue arises from improper handling of script opcodes in Bitcoin transactions, allowing remote attackers to spend bitcoins owned by other users. A fatal bug was discovered on July 28, 2010, in version 0.3.4, which is related to the origin of the topic with OP RETURN.

Recommendations For bitcoind versions prior to 0.3.5, update to version 0.3.5 or later to resolve the issue. For wxBitcoin versions prior to 0.3.5, update to version 0.3.5 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-5141

Produtos afetados

Bitcoind

Wxbitcoin

Referências · 4

• https://twitter.com/ChrisMartl/status/1740034753888501839 · Publicação no Twitter
• https://twitter.com/ChrisMartl/status/1689007576938319872 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2010-5141 · Nota de Segurança
• https://en.bitcoin.it/wiki/CVEs · Aviso do Fabricante