PT-2006-4245 · Opera · Opera

Ahmad Muammar W.K + 1 · Publicado 2006-07-05 · Atualizado 2022-02-28 · CVE-2006-3353

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Opera version 9

Description The issue is related to a crafted web page that triggers an out-of-bounds memory access, specifically when a malformed 'iframe' tag is combined with JavaScript to access certain style sheet properties. This can cause a denial of service, resulting in a crash and loss of availability for the browser.

Recommendations For Opera version 9, consider disabling JavaScript or restricting access to iframes as a temporary workaround to minimize the risk of exploitation. Avoid using style sheet properties in combination with iframes until the issue is resolved.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-3353

Produtos afetados

Opera

Referências · 11

• 🔥 https://exploit-db.com/exploits/1972 · Exploit
• 🔥 http://securityfocus.com/bid/18758 · Exploit
• 🔥 http://echo.or.id/adv/adv35-y3dips-2006.txt · Exploit
• http://securityfocus.com/archive/1/438872/100/0/threaded · Nota
• http://xforce.iss.net/xforce/xfdb/27531 · Nota
• http://milw0rm.com/exploits/1972 · Nota
• http://osvdb.org/27511 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3353 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27531 · Nota
• http://securityfocus.com/archive/1/archive/1/438872/100/0/threaded · Nota
• http://securityreason.com/securityalert/1185 · Nota