PT-2006-4093 · Opera · Opera

Chris Ries · Published 2006-06-23 · Updated 2022-02-28 · CVE-2006-3198

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Opera versions 8.54 and earlier

Description The issue allows remote attackers to execute arbitrary code via a JPEG image with large height and width values. This is due to an integer overflow, which causes less memory to be allocated than intended.

Recommendations For Opera versions 8.54 and earlier, update to a version later than 8.54 to resolve the issue.

Fix

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2006-3198

Affected Products

Opera

References · 14

• http://novell.com/linux/security/advisories/2006_38_opera.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3198 · Security Note
• http://vigilantminds.com/advi_detail.php?id=45 · Vendor Advisory
• http://secunia.com/advisories/20787 · Note
• http://secunia.com/advisories/20897 · Note
• http://frsirt.com/english/advisories/2006/2491 · Note
• http://securityfocus.com/archive/1/archive/1/438074/100/0/threaded · Note
• http://securityfocus.com/bid/18594 · Note
• http://vupen.com/english/advisories/2006/2491 · Note
• http://securityreason.com/securityalert/1133 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27318 · Note
• http://xforce.iss.net/xforce/xfdb/27318 · Note
• http://securitytracker.com/id?1016362 · Note
• http://securityfocus.com/archive/1/438074/100/0/threaded · Note