PT-2012-3645 · Bitcoin · Bitcoin-Qt

Publicado 2012-08-06 · Atualizado 2020-03-18 · CVE-2012-1910

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bitcoin-Qt versions 0.5.0.x through 0.5.0.4 Bitcoin-Qt versions 0.5.1.x through 0.5.3.0 Bitcoin-Qt versions 0.6.x through 0.6.0rc3

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted Bitcoin protocol messages due to the lack of MinGW multithread-safe exception handling.

Recommendations For Bitcoin-Qt versions 0.5.0.x through 0.5.0.4, update to version 0.5.0.5 or later. For Bitcoin-Qt versions 0.5.1.x through 0.5.3.0, update to version 0.5.3.1 or later. For Bitcoin-Qt versions 0.6.x through 0.6.0rc3, update to version 0.6.0rc4 or later.

Exploit

Correção

Identificadores relacionados

CVE-2012-1910

Produtos afetados

Bitcoin-Qt

Referências · 5

• 🔥 https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831 · Exploit
• https://bitcointalk.org/index.php?topic=69120.0 · Nota
• https://en.bitcoin.it/wiki/CVEs · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1910 · Nota de Segurança
• http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html · Nota