PT-2012-3007 · Opera · Opera

Published 2012-02-07 · Updated 2017-08-29 · CVE-2012-1003

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Opera versions 11.60 and earlier

Description The issue is related to multiple integer overflows that can cause a denial of service, specifically an application crash, when a large integer argument is passed to certain functions, including Int32Array, Float32Array, Float64Array, Uint32Array, Int16Array, or ArrayBuffer. The vendor has reportedly characterized this as a stability issue rather than a security issue.

Recommendations For Opera versions 11.60 and earlier, consider updating to a newer version to mitigate the risk of application crashes due to integer overflows. As a temporary workaround, avoid using large integer arguments with the affected functions until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2012-1003

Affected Products

Opera

References · 3

• 🔥 http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-overflow · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1003 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73027 · Note