PT-2012-3645 · Bitcoin · Bitcoin-Qt

Published 2012-08-06 · Updated 2020-03-18 · CVE-2012-1910

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bitcoin-Qt versions 0.5.0.x through 0.5.0.4 Bitcoin-Qt versions 0.5.1.x through 0.5.3.0 Bitcoin-Qt versions 0.6.x through 0.6.0rc3

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted Bitcoin protocol messages due to the lack of MinGW multithread-safe exception handling.

Recommendations For Bitcoin-Qt versions 0.5.0.x through 0.5.0.4, update to version 0.5.0.5 or later. For Bitcoin-Qt versions 0.5.1.x through 0.5.3.0, update to version 0.5.3.1 or later. For Bitcoin-Qt versions 0.6.x through 0.6.0rc3, update to version 0.6.0rc4 or later.

Exploit

Fix

Related Identifiers

CVE-2012-1910

Affected Products

Bitcoin-Qt

References · 5

• 🔥 https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1910 · Security Note
• https://bitcointalk.org/index.php?topic=69120.0 · Note
• https://en.bitcoin.it/wiki/CVEs · Note
• http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html · Note