Malicious ScriptSig in signed transaction

[tsusanka]

Impact: Seed Exposure
Scalability: Remote (Interaction)
Severity: Critical
Fixed in: Firmware 1.2.0
Reported by: Nicolas Bacca
Date reported: 2014-07-30

Detail

A specially crafted transaction could trigger a buffer overflow and extract the private key. Local interaction with the knowledge of PIN and passphrase was required.

Fix

trezor/trezor-firmware@524f2a9