CVE-2003-1396

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 31-12-2003 06:00

Last modified: - 01-03-2022 09:20

Total changes: - 2

Description

Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

6.8

Base score

8.6

6.4

Exploitability score

Impact score

Verification logic

vendor=opera AND product=opera_browser AND versionEndIncluding=7.10 AND versionStartIncluding=6.0

Reference

20030427 [Opera 7/6] Long File Extension Heap Buffer Overrun Vulnerability in Download.-Broken Link, Exploit
7450-Broken Link, Patch, Third Party Advisory, VDB Entry
opera-file-extension-bo(11894)-Third Party Advisory, VDB Entry

Keywords

CVE-2003-1396

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2003-1396

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures