Vulnerabilities > CVE-2006-3945 - Out-of-bounds Write vulnerability in Opera Browser 9.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 | |
OS | 1 |
Common Weakness Enumeration (CWE)
References
- http://browserfun.blogspot.com/2006/07/mobb-26-opera-css-background.html
- http://browserfun.blogspot.com/2006/07/mobb-26-opera-css-background.html
- http://www.osvdb.org/27374
- http://www.osvdb.org/27374
- http://www.vupen.com/english/advisories/2006/2987
- http://www.vupen.com/english/advisories/2006/2987
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27977
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27977