PT-2012-1353 · Wxbitcoin+1 · Wxbitcoin+1

Published 2012-08-06 · Updated 2023-12-27 · CVE-2010-5141

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions bitcoind versions prior to 0.3.5 wxBitcoin versions prior to 0.3.5

Description The issue arises from improper handling of script opcodes in Bitcoin transactions, allowing remote attackers to spend bitcoins owned by other users. A fatal bug was discovered on July 28, 2010, in version 0.3.4, which is related to the origin of the topic with OP RETURN.

Recommendations For bitcoind versions prior to 0.3.5, update to version 0.3.5 or later to resolve the issue. For wxBitcoin versions prior to 0.3.5, update to version 0.3.5 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-5141

Affected Products

Bitcoind

Wxbitcoin

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-5141 · Security Note
• https://en.bitcoin.it/wiki/CVEs · Vendor Advisory
• https://twitter.com/ChrisMartl/status/1740034753888501839 · Twitter Post
• https://twitter.com/ChrisMartl/status/1689007576938319872 · Twitter Post