Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-4944
HistorySep 18, 2007 - 12:00 a.m.

CVE-2007-4944

2007-09-1800:00:00
ubuntu.com
ubuntu.com
8

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.7%

The canvas.createPattern function in Opera 9.x before 9.22 for Linux,
FreeBSD, and Solaris does not clear memory before using it to process a new
pattern, which allows remote attackers to obtain sensitive information
(memory contents) via JavaScript.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchopera< 9.23-20070809.6dapper1UNKNOWN
ubuntu6.10noarchopera< 9.23-20070809.6edgy1UNKNOWN
ubuntu7.04noarchopera< 9.23-20070809.6feisty1UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.011 Low

EPSS

Percentile

84.7%