Lucene search

K
nvd[email protected]NVD:CVE-2007-0127
HistoryJan 09, 2007 - 2:28 a.m.

CVE-2007-0127

2007-01-0902:28:00
CWE-94
web.nvd.nist.gov
5

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.163

Percentile

96.0%

The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.

Affected configurations

Nvd
Node
operaopera_browserRange9.02
OR
operaopera_browserMatch1.00
OR
operaopera_browserMatch2.00
OR
operaopera_browserMatch2.10
OR
operaopera_browserMatch2.10beta1
OR
operaopera_browserMatch2.10beta2
OR
operaopera_browserMatch2.10beta3
OR
operaopera_browserMatch2.12
OR
operaopera_browserMatch3.00
OR
operaopera_browserMatch3.00beta
OR
operaopera_browserMatch3.10
OR
operaopera_browserMatch3.21
OR
operaopera_browserMatch3.50
OR
operaopera_browserMatch3.51
OR
operaopera_browserMatch3.60
OR
operaopera_browserMatch3.61
OR
operaopera_browserMatch3.62
OR
operaopera_browserMatch3.62beta
OR
operaopera_browserMatch4.00
OR
operaopera_browserMatch4.00beta2
OR
operaopera_browserMatch4.00beta3
OR
operaopera_browserMatch4.00beta4
OR
operaopera_browserMatch4.00beta5
OR
operaopera_browserMatch4.00beta6
OR
operaopera_browserMatch4.01
OR
operaopera_browserMatch4.02
OR
operaopera_browserMatch5.0
OR
operaopera_browserMatch5.0beta2
OR
operaopera_browserMatch5.0beta3
OR
operaopera_browserMatch5.0beta4
OR
operaopera_browserMatch5.0beta5
OR
operaopera_browserMatch5.0beta6
OR
operaopera_browserMatch5.0beta7
OR
operaopera_browserMatch5.0beta8
OR
operaopera_browserMatch5.02
OR
operaopera_browserMatch5.10
OR
operaopera_browserMatch5.11
OR
operaopera_browserMatch5.12
OR
operaopera_browserMatch6.0
OR
operaopera_browserMatch6.0beta1
OR
operaopera_browserMatch6.0beta2
OR
operaopera_browserMatch6.0tp1
OR
operaopera_browserMatch6.0tp2
OR
operaopera_browserMatch6.0tp3
OR
operaopera_browserMatch6.1
OR
operaopera_browserMatch6.01
OR
operaopera_browserMatch6.1beta1
OR
operaopera_browserMatch6.02
OR
operaopera_browserMatch6.03
OR
operaopera_browserMatch6.04
OR
operaopera_browserMatch6.05
OR
operaopera_browserMatch6.06
OR
operaopera_browserMatch6.11
OR
operaopera_browserMatch6.12
OR
operaopera_browserMatch7.0
OR
operaopera_browserMatch7.0beta1
OR
operaopera_browserMatch7.0beta1_v2
OR
operaopera_browserMatch7.0beta2
OR
operaopera_browserMatch7.01
OR
operaopera_browserMatch7.02
OR
operaopera_browserMatch7.03
OR
operaopera_browserMatch7.10
OR
operaopera_browserMatch7.10beta1
OR
operaopera_browserMatch7.11
OR
operaopera_browserMatch7.11beta2
OR
operaopera_browserMatch7.20
OR
operaopera_browserMatch7.20beta7
OR
operaopera_browserMatch7.21
OR
operaopera_browserMatch7.22
OR
operaopera_browserMatch7.23
OR
operaopera_browserMatch7.50
OR
operaopera_browserMatch7.50beta1
OR
operaopera_browserMatch7.51
OR
operaopera_browserMatch7.52
OR
operaopera_browserMatch7.53
OR
operaopera_browserMatch7.54
OR
operaopera_browserMatch7.54update1
OR
operaopera_browserMatch7.54update2
OR
operaopera_browserMatch7.60
OR
operaopera_browserMatch8.0
OR
operaopera_browserMatch8.0beta1
OR
operaopera_browserMatch8.0beta2
OR
operaopera_browserMatch8.0beta3
OR
operaopera_browserMatch8.01
OR
operaopera_browserMatch8.02
OR
operaopera_browserMatch8.50
OR
operaopera_browserMatch8.51
OR
operaopera_browserMatch8.52
OR
operaopera_browserMatch8.53
OR
operaopera_browserMatch8.54
OR
operaopera_browserMatch9.0
OR
operaopera_browserMatch9.0beta1
OR
operaopera_browserMatch9.0beta2
OR
operaopera_browserMatch9.01
VendorProductVersionCPE
operaopera_browser*cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
operaopera_browser1.00cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*
operaopera_browser2.00cpe:2.3:a:opera:opera_browser:2.00:*:*:*:*:*:*:*
operaopera_browser2.10cpe:2.3:a:opera:opera_browser:2.10:*:*:*:*:*:*:*
operaopera_browser2.10cpe:2.3:a:opera:opera_browser:2.10:beta1:*:*:*:*:*:*
operaopera_browser2.10cpe:2.3:a:opera:opera_browser:2.10:beta2:*:*:*:*:*:*
operaopera_browser2.10cpe:2.3:a:opera:opera_browser:2.10:beta3:*:*:*:*:*:*
operaopera_browser2.12cpe:2.3:a:opera:opera_browser:2.12:*:*:*:*:*:*:*
operaopera_browser3.00cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:*
operaopera_browser3.00cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:*
Rows per page:
1-10 of 941

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.163

Percentile

96.0%