Voltar para o portal de segurança

Malicious ScriptSig in signed transaction

Reportado em July 30, 2014

A specially crafted transaction could trigger a buffer overflow and extract the private key. Local interaction with the knowledge of PIN and passphrase was required.

Fixed in firmware 1.3.1.

Reportado por Nicolas Bacca
Trezor Model One

Vulnerabilidades resolvidas

Reportado pela comunidade. Investigado. Resolvido. Porque sua segurança nunca é opcional.