What caused CVE-2012-2459? How was it fixed? Gavin Andresen made an announcement about this denial of service issue in 2012 here, but it's light on technical details.
The full disclosure post is here: https://bitcointalk.org/?topic=102395

You can find it from the Bitcoin CVE list: https://en.bitcoin.it/wiki/CVEs