Opera 7.11/7.20 HREF Malformed Server Name Heap Corruption Vulnerability

2003-10-20T00:00:00
ID EDB-ID:23263
Type exploitdb
Reporter @stake
Modified 2003-10-20T00:00:00

Description

Opera 7.11/7.20 HREF Malformed Server Name Heap Corruption Vulnerability. CVE-2003-0870. Dos exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/8853/info

A vulnerability has been discovered in the Opera web browser that could lead to remote code execution. The problem is said to trigger when handling malformed HTML HREF values and may result in a buffer overrun occuring within heap memory. As a result of this issue, an attacker may be capable of executing arbitrary code on a victim user by coaxing them to a malicious web site, or possibly by transmitting a malicious HTML e-mail message to an Opera mail client. 

<a href="file://server%%[many % characters]%%text" ></a>