CVE-2012-1910

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-06 · updated 2026-06-16

Description

Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW multithread-safe exception handling, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted Bitcoin protocol messages.

Affected products

Bitcoin-Qt: 0.5.0-rc1, 0.5.0.4, 0.5.1-rc1, 0.5.3.0
Bitcoin Core: 0.5.0, 0.5.1, 0.5.2, 0.6.0, 0.6.0-rc1, 0.6.0-rc3

References

http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html
https://bitcointalk.org/index.php?topic=69120.0
https://en.bitcoin.it/wiki/CVEs
https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831
http://gavintech.blogspot.com/2012/03/full-disclosure-bitcoin-qt-on-windows.html
https://bitcointalk.org/index.php?topic=69120.0
https://en.bitcoin.it/wiki/CVEs
https://github.com/bitcoin/bitcoin/commit/8864019f6d88b13d3442843d9e6ebeb8dd938831

Get alerted when CVE-2012-1910 or the next vulnerability affects your stack