25 matches found
Memory corruption
Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...
CVE-2008-1762
Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...
CVE-2008-1762
Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...
Opera Web浏览器9.27版本修复多个内存破坏漏洞
BUGTRAQ ID: 28585 Opera是一款流行的WEB浏览器,支持多种平台。 Opera的实现上存在多个安全漏洞,远程攻击者可能利用这些漏洞控制用户系统。 当Opera遇到网页上的newsfeed源时,就会提示用户添加该源为newsfeed。恶意脚本可以控制feed源,导致Opera由于错误的内存访问而出现崩溃或执行任意指令。 HTML CANVAS单元可使用度量图形作为图样。如果精心控制了图形的度量的话,脚本就会导致Opera由于内存破坏而出现崩溃或执行任意代码。 Opera Software Opera = 9.26 Opera Software -------------...
CVE-2007-6524
Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap BMP file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420...