PT-2006-4093 · Opera · Opera

Chris Ries · Publicado 2006-06-23 · Atualizado 2022-02-28 · CVE-2006-3198

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Opera versions 8.54 and earlier

Description The issue allows remote attackers to execute arbitrary code via a JPEG image with large height and width values. This is due to an integer overflow, which causes less memory to be allocated than intended.

Recommendations For Opera versions 8.54 and earlier, update to a version later than 8.54 to resolve the issue.

Correção

RCE

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2006-3198

Produtos afetados

Opera

Referências · 14

• http://secunia.com/advisories/20787 · Nota
• http://secunia.com/advisories/20897 · Nota
• http://frsirt.com/english/advisories/2006/2491 · Nota
• http://securityfocus.com/archive/1/archive/1/438074/100/0/threaded · Nota
• http://novell.com/linux/security/advisories/2006_38_opera.html · Aviso do Fabricante
• http://securityfocus.com/bid/18594 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3198 · Nota de Segurança
• http://vupen.com/english/advisories/2006/2491 · Nota
• http://securityreason.com/securityalert/1133 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27318 · Nota
• http://vigilantminds.com/advi_detail.php?id=45 · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/27318 · Nota
• http://securitytracker.com/id?1016362 · Nota
• http://securityfocus.com/archive/1/438074/100/0/threaded · Nota