Lucene search

K
cve[email protected]CVE-2009-1234
HistoryApr 02, 2009 - 5:30 p.m.

CVE-2009-1234

2009-04-0217:30:00
CWE-20
web.nvd.nist.gov
36
cve-2009-1234
opera 9.64
opera 9.52
denial of service
nvd
xml
application crash

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.3%

Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 9.52 is also affected.

Affected configurations

NVD
Node
operaopera_browserMatch9.52
OR
operaopera_browserMatch9.64

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.3%