Lucene search

K
freebsdFreeBSD4867AE85-608D-11DB-8FAF-000C6EC775D9
HistoryOct 17, 2006 - 12:00 a.m.

opera -- URL parsing heap overflow vulnerability

2006-10-1700:00:00
vuxml.freebsd.org
9

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.299 Low

EPSS

Percentile

96.9%

iDefense Labs reports:

Remote exploitation of a heap overflow vulnerability
within version 9 of Opera Software’s Opera Web browser
could allow an attacker to execute arbitrary code on the
affected host.
A flaw exists within Opera when parsing a tag that
contains a URL. A heap buffer with a constant size of 256
bytes is allocated to store the URL, and the tag’s URL is
copied into this buffer without sufficient bounds checking
of its length.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopera< 9.02UNKNOWN
FreeBSDanynoarchopera-devel< 9.02UNKNOWN
FreeBSDanynoarchlinux-opera< 9.02UNKNOWN

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.299 Low

EPSS

Percentile

96.9%

Related for 4867AE85-608D-11DB-8FAF-000C6EC775D9