CVE-2003-1387

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 31-12-2003 06:00

Last modified: - 01-03-2022 09:15

Total changes: - 2

Description

Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

10.0

6.4

Exploitability score

Impact score

Verification logic

vendor=opera AND product=opera_browser AND version=6.05

vendor=opera AND product=opera_browser AND version=6.06

vendor=opera AND product=opera_browser AND version=7.0 AND update=beta1

vendor=opera AND product=opera_browser AND version=7.0 AND update=beta1_v2

vendor=opera AND product=opera_browser AND version=7.0 AND update=beta2

Reference

20030209 Opera Username Buffer Overflow Vulnerability-Broken Link, Third Party Advisory, VDB Entry
20030320 Opara 6.06 Released, Security-Hole Left-Broken Link, Exploit, Third Party Advisory, VDB Entry
6811-Broken Link, Patch, Third Party Advisory, VDB Entry
3253-Broken Link
opera-username-url-bo(11281)-Third Party Advisory, VDB Entry

Keywords

CVE-2003-1387

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2003-1387

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures