CVE-2011-0682

 

Published at: - 31-01-2011 10:00

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML form with a select element that contains a large number of children.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• http://www.opera.com/docs/changelogs/windows/1101/
• http://www.opera.com/docs/changelogs/unix/1101/
• http://www.opera.com/docs/changelogs/mac/1101/
• http://www.opera.com/support/kb/view/982/
• 70728-
• ADV-2011-0231-Vendor Advisory
• 43023-Vendor Advisory
• 46036-
• oval:org.mitre.oval:def:12636-
• https://www.alternativ-testing.fr/blog/index.php?post/2011/[CVE-XXXX-XXXX]-Opera-11-Integer-Truncation-Vulnerability

 

Keywords

NVD

 

CVE-2011-0682

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures