CVE-2007-6524

 

Published at: - 24-12-2007 09:46

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:C/I:N/A:N

 

Verification logic

 

Reference

• http://www.opera.com/docs/changelogs/linux/925/
• http://www.opera.com/docs/changelogs/windows/925/
• 1019131-
• 28169-Patch, Vendor Advisory
• http://bugs.gentoo.org/show_bug.cgi?id=202770
• GLSA-200712-22-
• 26937-
• 28290-Vendor Advisory
• SUSE-SA:2008:001-
• 28314-Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=408076
• http://www.opera.com/support/search/view/876/
• 1019435-
• 42691-
• ADV-2007-4261-Vendor Advisory
• opera-bitmaps-information-disclosure(39163)-
• 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service-

 

Keywords

NVD

 

CVE-2007-6524

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures