PT-2006-2825 · Opera · Opera

Publicado

2006-04-19

·

Atualizado

2018-10-18

·

CVE-2006-1834

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Opera versions prior to 8.54
Description The issue is related to an integer signedness error that allows remote attackers to execute arbitrary code via long values in a stylesheet attribute. This error occurs because the long values pass a length check. Additionally, a sign extension problem makes the attack easier with shorter strings.
Recommendations For Opera versions prior to 8.54, update to version 8.54 or later to resolve the issue. As a temporary workaround, consider restricting the use of stylesheet attributes to minimize the risk of exploitation.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2006-1834

Produtos afetados

Opera