CVE-2006-3199

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 23-06-2006 10:06

Last modified: - 28-02-2022 05:09

Total changes: - 2

Description

Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

5.0

Base score

10.0

2.9

Exploitability score

Impact score

Verification logic

vendor=opera AND product=opera_browser AND version=9.0

Reference

http://www.critical.lt/?vuln/349
18585-Broken Link, Exploit, Third Party Advisory, VDB Entry
http://my.opera.com/community/forums/topic.dml?id=144635
1016359-Broken Link, Third Party Advisory, VDB Entry
27510-Broken Link
ADV-2006-2617-Broken Link
opera-href-dos(27289)-Third Party Advisory, VDB Entry
20060624 Re: Opera 9 DoS PoC-Broken Link, Third Party Advisory, VDB Entry
20060621 Opera 9 DoS PoC-Broken Link, Third Party Advisory, VDB Entry

Keywords

CVE-2006-3199

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2006-3199

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures