Lucene search
+L

5 matches found

Opera Security Advisories
Opera Security Advisories
•added 2008/12/16 12:00 a.m.•19 views

Vulnerability in createSVGTransformFromMatrix (JavaScript, SVG) – Opera Security Advisories

Vulnerability in createSVGTransformFromMatrix JavaScript, SVG – Opera Security Advisories OPCOM Team | December 16, 2008 Summary A vulnerability in createSVGTransformFromMatrix ObjectTypecasting can crash Opera. Severity Moderate Problem description Passing an incorrect object to...

6.1AI score
SaveExploits0References1
Opera Security Advisories
Opera Security Advisories
•added 2008/12/16 12:00 a.m.•42 views

Vulnerability in createSVGTransformFromMatrix (JavaScript, SVG)

Passing an incorrect object to createSVGTransformFromMatrixcan crash Opera and enable arbitrary code execution. Users who have disabled JavaScript are not affected...

3AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2007/01/17 12:00 a.m.•39 views

GLSA-200701-08 : Opera: Two remote code execution vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-08 Opera: Two remote code execution vulnerabilities Christoph Deal discovered that JPEG files with a specially crafted DHT marker can be exploited to cause a heap overflow. Furthermore, an anonymous person discovered that...

9.3CVSS6.7AI score0.11044EPSS
SaveExploits1References5
Gentoo Linux
Gentoo Linux
•added 2007/01/12 12:00 a.m.•54 views

Opera: Two remote code execution vulnerabilities

Background Opera is a multi-platform web browser. Description Christoph Deal discovered that JPEG files with a specially crafted DHT marker can be exploited to cause a heap overflow. Furthermore, an anonymous person discovered that Opera does not correctly handle objects passed to the...

9.3CVSS7.5AI score0.11044EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/09 12:00 a.m.•3 views

CVE-2007-0127: Improper Control of Generation of Code

The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be...

9.3CVSS6.5AI score0.0473EPSS
SaveExploits0References2
Rows per page
Query Builder