返回安全门户

Malicious ScriptSig in signed transaction

报告时间：July 30, 2014

A specially crafted transaction could trigger a buffer overflow and extract the private key. Local interaction with the knowledge of PIN and passphrase was required.

Fixed in firmware 1.3.1.

报告人 Nicolas Bacca
Trezor Model One

已修复的漏洞

由社区报告，经调查后已解决。因为您的安全永远不可妥协。