PT-2006-2825 · Opera · Opera

Published 2006-04-19 · Updated 2018-10-18 · CVE-2006-1834

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Opera versions prior to 8.54

Description The issue is related to an integer signedness error that allows remote attackers to execute arbitrary code via long values in a stylesheet attribute. This error occurs because the long values pass a length check. Additionally, a sign extension problem makes the attack easier with shorter strings.

Recommendations For Opera versions prior to 8.54, update to version 8.54 or later to resolve the issue. As a temporary workaround, consider restricting the use of stylesheet attributes to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2006-1834

Affected Products

Opera

References · 17

• 🔥 http://securityfocus.com/bid/17513 · Exploit
• 🔥 http://securitytracker.com/id?1015912 · Exploit
• 🔥 http://sec-consult.com/259.html · Exploit
• 🔥 https://exploit-db.com/exploits/27641 · Exploit
• http://security.gentoo.org/glsa/glsa-200606-01.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1834 · Security Note
• http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html · Vendor Advisory
• http://securityfocus.com/archive/1/archive/1/430876/100/0/threaded · Note
• http://marc.theaimsgroup.com/?l=full-disclosure&m=114493114031891&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25829 · Note
• http://opera.com/docs/changelogs/windows/854 · Note
• http://frsirt.com/english/advisories/2006/1354 · Note
• http://secunia.com/advisories/20117 · Note
• http://xforce.iss.net/xforce/xfdb/25829 · Note
• http://vupen.com/english/advisories/2006/1354 · Note