CVE-2012-1910: bitcoin bitcoin_core
Vulnerability summary
CVE-2012-1910 is a high (CVSS 7.5) vulnerability in bitcoin bitcoin_core. EPSS estimates a 4.51% chance of exploitation in the next 30 days, higher than 91.5% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Timeline
- 06-08-2012PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted Bitcoin protocol messages.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.51%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.51% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundBitcoin
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Bitcoin2 products
- bitcoin_core0.5.0 | 0.5.1 | 0.5.2 | 0.6.0 | 0.6.0:rc1 | 0.6.0:rc3
- bitcoin-qt0.5.0:rc1 | 0.5.0.4 | 0.5.1:rc1 | 0.5.3.0
1 vendor · 2 products
References
4 links- github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831X Refsource CONFIRMExploitPatch
- bitcointalk.org/index.php?topic=69120.0X Refsource CONFIRM
- gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.htmlX Refsource CONFIRM
- en.bitcoin.it/wiki/CVEsX Refsource CONFIRM