ID CVE-2012-1910
Summary Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted Bitcoin protocol messages.
References
Vulnerable Configurations
  • cpe:2.3:a:bitcoin:bitcoin-qt:0.5.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin-qt:0.5.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin-qt:0.5.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin-qt:0.5.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin-qt:0.5.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin-qt:0.5.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin-qt:0.5.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin-qt:0.5.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin_core:0.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin_core:0.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin_core:0.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin_core:0.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin_core:0.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin_core:0.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin_core:0.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin_core:0.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin_core:0.6.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin_core:0.6.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:bitcoin:bitcoin_core:0.6.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:bitcoin:bitcoin_core:0.6.0:rc3:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 18-03-2020 - 17:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
confirm
Last major update 18-03-2020 - 17:31
Published 06-08-2012 - 16:55
Last modified 18-03-2020 - 17:31
Back to Top